summaryrefslogtreecommitdiffstats
path: root/source4/heimdal/lib
Commit message (Collapse)AuthorAgeFilesLines
* s4:heimdal: import lorikeet-heimdal-200908052208 (commit ↵Andrew Bartlett2009-08-0631-114/+30
| | | | | | | | | | | | | 370a73a74199a5a55188340906e15fd795f67a74) This removes some of the portability changes made to code under heimdal/ If these are still required, then we will re-add them with code under heimdal_build/ (so that we can simply 'drop in' future heimdal releases). Andrew Bartlett
* s4:heimdal: import lorikeet-heimdal-200908050050 (commit ↵Andrew Bartlett2009-08-0544-346/+1090
| | | | | | | | | | | 8714779fa7376fd9f7761587639e68b48afc8c9c) This also adds a new hdb-glue.c file, to cope with Heimdal's uncondtional enabling of SQLITE. (Very reasonable, but not required for Samba4's use). Andrew Bartlett
* s4:kerberos Add support for user principal names in certificatesAndrew Bartlett2009-07-281-1/+6
| | | | | | | | | | | | | | This extends the PKINIT code in Heimdal to ask the HDB layer if the User Principal Name name in the certificate is an alias (perhaps just by case change) of the name given in the AS-REQ. (This was a TODO in the Heimdal KDC) The testsuite is extended to test this behaviour, and the other PKINIT certficate (using the standard method to specify a principal name in a certificate) is updated to use a Administrator (not administrator). (This fixes the kinit test). Andrew Bartlett
* s4:heimdal Extend the 'hdb as a keytab' codeAndrew Bartlett2009-07-271-4/+145
| | | | | | | | | | | | This extends the hdb_keytab code to allow enumeration of all the keys. The plan is to allow ktutil's copy command to copy from Samba4's hdb_samba4 into a file-based keytab used in wireshark. One day, with a few more hacks, we might even make this a loadable module that can be used directly... Andrew Bartlett
* s4:heimdal: import lorikeet-heimdal-200907162216 (commit ↵Andrew Bartlett2009-07-175-6/+38
| | | | | | | | | | | d09910d6803aad96b52ee626327ee55b14ea0de8) This includes in particular changes to the KDC to resolve bug 6272, originally by Matthieu Patou <mat+Informatique.Samba@matws.net>. We need to sort the AuthorizationData elements to put the PAC first, or else WinXP breaks when browsed from Win2k8. Andrew Bartlett
* s4:heimdal: import lorikeet-heimdal-200907152325 (commit ↵Andrew Bartlett2009-07-1664-565/+1151
| | | | 2bef9cd5378c01e9c2a74d6221761883bd11a5c5)
* s4:heimdal The implied GSS_C_MUTUAL_FLAG depends on AP_OPTS_MUTUAL_REQUIREDAndrew Bartlett2009-07-161-1/+4
| | | | | | | | We had previously assumed it was unconditional. Samba3 didn't mind very much, but Samba4's samba3-like client did, and the behaviour differed to Win2008 behaviour. Andrew Bartlett
* s4:heimdal: readd heimdal/lib/asn1/asn1parse.y which was parse.y before the ↵Stefan Metzmacher2009-07-069-175/+1185
| | | | | | | | | | last import Also commit the regenerated files for systems without yacc and lex. This fixes the build with automatic dependecies for me. metze
* heimdal: don't include <ifaddrs.h> without knowing it's thereBjörn Jacke2009-07-031-0/+2
| | | | this is 73dbbe0d54 re-added. abartlet, please pick this to lorikeet.
* s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookupsAndrew Bartlett2009-06-301-2/+4
| | | | | | | | | | | | | | The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail list user principal name) in an AS-REQ. Evidence from the wild (Win2k8 reportadely) indicates that this is instead valid for all types of requests. While this is now handled in heimdal/kdc/misc.c, a flag is now defined in Heimdal's hdb so that we can take over this handling in future (once we start using a system Heimdal, and if we find out there is more to be done here). Andrew Bartlett
* s4:heimdal: import lorikeet-heimdal-200906080040 (commit ↵Andrew Bartlett2009-06-12296-5419/+8144
| | | | | | | | | | | 904d0124b46eed7a8ad6e5b73e892ff34b6865ba) Also including the supporting changes required to pass make test A number of heimdal functions and constants have changed since we last imported a tree (for the better, but inconvenient for us). Andrew Bartlett
* s4:heimdal: fix build on FreeBSDBjörn Jacke2009-06-081-0/+3
| | | | | | | | | | Patch from Timur I. Bakeyev sent to samba-technical: Heimdal requires openpty() presence. FreeBSD has in in standard libc, so autodetection works, but compilation fails, as declaration of this function is missing. This patch adds proper header detection and inclusion for openpty().
* Fix the build. Looks like no one ever compiled this on a systemJeremy Allison2009-02-241-0/+12
| | | | | with a libintl.h before. Jeremy.
* Start fixing Solaris build failures.Jeremy Allison2009-02-241-1/+1
| | | | Jeremy.
* heimdal: void functions should not return a valueStefan Metzmacher2009-01-311-1/+1
| | | | metze
* heimdal:hdb: always include "config.h" firstStefan Metzmacher2009-01-301-0/+4
| | | | metze
* heimdal:camellia: include roken.hStefan Metzmacher2009-01-302-0/+4
| | | | metze
* heimdal:roken: arg_match_long() should return a valueStefan Metzmacher2009-01-301-0/+3
| | | | | | This should fix a build problem on IRIX. metze
* heimdal:roken: arg_printusage() should not try to return a value.Stefan Metzmacher2009-01-301-2/+2
| | | | | | This should fix problems with the IRIX build. metze
* heimdal:camellia-ntt.c: include config.h as first headerStefan Metzmacher2009-01-301-0/+3
| | | | metze
* heimdal: don't include <sys/cdefs.h> without knowing it's thereStefan Metzmacher2009-01-301-0/+2
| | | | metze
* heimdal: don't include <ifaddrs.h> without knowing it's thereStefan Metzmacher2009-01-301-0/+2
| | | | metze
* Use standard heimdal function for finding interfaces - libreplace provides ↵Jelmer Vernooij2008-11-021-0/+292
| | | | support for the underlying functions now.
* s4: import lorikeet-heimdal-200810271034Stefan Metzmacher2008-10-28386-11035/+12632
| | | | metze
* Make sure prototypes are always included, make some functions static andJelmer Vernooij2008-10-201-3/+3
| | | | remove some unused functions.
* Add samba4kpasswd and rkpty binariesAndrew Bartlett2008-10-202-0/+402
| | | | | | | | smaba4kpasswd will be used to test the kpasswdd componet of the KDC (which is up until now untested), and rkpty is an expect-like wrapper we can use to blackbox that utility. Andrew Bartlett
* Rename hdb_ldb to hdb_samba4 and load as a plugin into the kdc.Andrew Bartlett2008-09-292-14/+34
| | | | | | | | | | This avoids one more custom patch to the Heimdal code, and provides a more standard way to produce hdb plugins in future. I've renamed from hdb_ldb to hdb_samba4 as it really is not generic ldb. Andrew Bartlett
* Merge krb5_cksumtype_to_enctype from Heimdal svn -r 23719Andrew Bartlett2008-09-031-32/+70
| | | | (This used to be commit cc1df3c002e6af25add3c8ae20e7efc2ab6f2fa8)
* Don't wipe the PAC checksums, the caller may actually need them.Andrew Bartlett2008-08-281-14/+0
| | | | (This used to be commit 9db5a966fce0b71a0d2167b4aff70cc081abc1cc)
* heimdal: add missing heimdal/lib/hcrypto/{evp-aes-cts.c,evp-hcrypto.c}, sorry...Stefan Metzmacher2008-08-262-0/+453
| | | | | metze (This used to be commit 0c4227e45d6b8e31a0219358042318e9d2a0b36d)
* heimdal: import heimdal's trunk svn rev 23697 + lorikeet-heimdal patchesStefan Metzmacher2008-08-26438-1899/+2659
| | | | | | | This is based on f56a3b1846c7d462542f2e9527f4d0ed8a34748d in my heimdal-wip repo. metze (This used to be commit 467a1f2163a63cdf1a4c83a69473db50e8794f53)
* heimdal_build: autogenerate the heimdal private/proto headersStefan Metzmacher2008-08-2610-8445/+0
| | | | | | | | Now it's possible to just use a plain heimdal tree in source/heimdal/ without any pregenerated files. metze (This used to be commit da333ca7113f78eeacab4f93b401f075114c7d88)
* heimdal_build: autogenerate table files in heimdal/lib/wind/Stefan Metzmacher2008-08-2632-26563/+46056
| | | | | metze (This used to be commit f4cfba26aebb18fecdb50478bec9c07d4910ab3b)
* heimdal: remove unused old filesStefan Metzmacher2008-08-262-509/+0
| | | | | metze (This used to be commit 94cef56212d7d7c1150aea760dba24bda7190442)
* heimdal_build: add a fake sqlite keytab implementationStefan Metzmacher2008-08-261-2/+0
| | | | | | | This remove a difference against lorikeet-heimdal. metze (This used to be commit 4314df3561dfe60228db0af220549300b0137c85)
* Revert "gsskrb5: add support for DCE_STYLE and des and des3 keys"Stefan Metzmacher2008-08-262-64/+22
| | | | | | | | | This reverts commit 86848dd0f217774faed81af8fbf68618013e20a1. This should come back via a merge from heimdal's trunk later. metze (This used to be commit 585e5360e2d9f722e80850eb86c3d4253530e8ba)
* Revert "gsskrb5: always return an acceptor subkey"Stefan Metzmacher2008-08-261-18/+4
| | | | | | | | | | This reverts commit 6a8b07c39558f240b89e833ecba15d8b9fc020e8. This isn't strictly needed and will come back in the next merge from heimdal's trunk. metze (This used to be commit 8ed040c8c4bed082ab74ab267090b35bb57db3f3)
* Revert "krb5: always generate the acceptor subkey as the same enctype as the ↵Stefan Metzmacher2008-08-141-3/+0
| | | | | | | | | | | | used service key" This reverts commit dbb94133e0313cae933d261af0bf1210807a6d11. As we fixed gensec_gssapi to only return a session key when it's have the correct session key, this hack isn't needed anymore. metze (This used to be commit 697cd1896bccaa55ee422f17d9312d787ca699ed)
* gsskrb5: always return an acceptor subkeyStefan Metzmacher2008-08-141-4/+18
| | | | | | | | For non cfx keys it's the same as the intiator subkey. This matches windows behavior. metze (This used to be commit 6a8b07c39558f240b89e833ecba15d8b9fc020e8)
* gsskrb5: try to be compatible with windows for gss_wrap* and cfxStefan Metzmacher2008-08-082-11/+39
| | | | | | | | | The good thing is that windows and heimdal both use EC=0 in the non DCE_STYLE case, so we need the windows compat hack only in DCE_STYLE mode. metze (This used to be commit 0fa41a94e466d5e11bcf362ccd8ff41b72733d1a)
* krb5: always generate the acceptor subkey as the same enctype as the used ↵Stefan Metzmacher2008-08-081-0/+3
| | | | | | | | | service key With this patch samba4 can use gsskrb5_get_subkey() to get the session key. metze (This used to be commit dbb94133e0313cae933d261af0bf1210807a6d11)
* gsskrb5: add support for DCE_STYLE and des and des3 keysStefan Metzmacher2008-08-082-22/+64
| | | | | | | Only the des keys are tested as windows doesn't support des3 metze (This used to be commit 86848dd0f217774faed81af8fbf68618013e20a1)
* heimdal: add missing filesStefan Metzmacher2008-08-012-0/+107
| | | | | metze (This used to be commit b395cd7acdb3ca5b25368fbbad0606efe4699d04)
* heimdal: add missing file heimdal/lib/gssapi/mech/gss_pseudo_random.cStefan Metzmacher2008-08-011-0/+69
| | | | | metze (This used to be commit 3bd7e68a5cfe80733782367e327b570d04b21586)
* heimdal: update to lorikeet-heimdal rev 801Stefan Metzmacher2008-08-01215-3066/+9501
| | | | | metze (This used to be commit d6c54a66fb23c784ef221a3c1cf766b72bdb5a0b)
* gsskrb5: just don't force, but allow the flags when GSS_CF_NO_CI_FLAGS is givenStefan Metzmacher2008-06-271-0/+6
| | | | | metze (This used to be commit f10c9ca3612d7bdc4c2c221e959f8c48ec2f9349)
* gsskrb5: fix gss_krb5_cred_no_ci_flags_x_oid_desc variable nameStefan Metzmacher2008-06-271-2/+2
| | | | | metze (This used to be commit d88be1a1cb543b4e2cc5d15262da786558aa276d)
* krb5_init_sec_context: skip the token header when GSS_C_DCE_STYLE is specifiedStefan Metzmacher2008-06-021-5/+11
| | | | | | | | | | Windows (and heimdal) accepts packets with token header in the server, but it doesn't match the windows client. We now match the windows client and that fixes also the display in wireshark. metze (This used to be commit 58f66184f0f732a78e86bbb0f3c29e920f086d08)
* Merge lorikeet-heimdal -r 787 into Samba4 tree.Andrew Bartlett2008-03-19144-1294/+36521
| | | | | Andrew Bartlett (This used to be commit d88b530522d3cef67c24422bd5182fb875d87ee2)
* idl: Use typedef rather than declare.Jelmer Vernooij2008-01-121-5/+27
| | | | (This used to be commit 3fd750bd54f150ff62fd8165406bd26d03d624cf)
generated by cgit (git 2.34.1) at 2024-11-20 11:25:00 +0000