summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Add CRC32 function using Zlib's crc32Simo Sorce2013-10-234-0/+161
|
* Fix URLs with new upstream locationsSimo Sorce2013-10-231-2/+2
|
* Release 0.2.0v0.2.0Simo Sorce2013-10-181-1/+1
|
* Test connectionless contextsconnectionlessSimo Sorce2013-10-181-2/+233
|
* Support connectionless signing and sealing.Simo Sorce2013-10-183-11/+104
| | | | | In connectionless mode (GSS_C_DATAGRAM_FLAG on) sealing keys ust be rotated for each message.
* Add way to set sequence numbres.Simo Sorce2013-10-185-0/+81
| | | | | | | | | | | In NTLMSSP connectionless mode applications are supposed to provide the sequence number, however GSSAPI's get_mic and verify_mic functions do not allow to pass an explicit sequence number. Allow to override the context sequence numbers using a custom oid and implemnting gss_set_sec_context_option() Allows the operation only if the context is in connectionless mode.
* Add support for connectionless modeSimo Sorce2013-10-181-46/+117
| | | | | This needs a new GSSAPI flag, for now grab a number and define GSS_C_DATAGRAM_FLAG ourselves.
* Add public devel header fileSimo Sorce2013-10-184-7/+60
| | | | | This contains definitions for various OIDs and flags needed to implemented non-standard features like NTLMSSP Connectionless mode.
* Add special case for enterprise namesSimo Sorce2013-10-181-1/+42
| | | | | | | | | | | | | | | | | | | | | | | | When enterprise names are used they need to be passed with the embedded '@' signed escaped with a '\', when that is done the whole name is used as the user name and the name is not split on the @ or \ characters. These forms are now supported: foo USERNAME: foo DOMAIN: <null> BAR\foo USERNAME: foo DOMAIN: BAR foo@BAR USERNAME: foo DOMAIN: BAR foo\@bar.example.com USERNAME: foo\@bar.example.com DOMAIN: <null>
* Treat NO OID as GSS_C_NT_USER_NAME on importSimo Sorce2013-10-181-3/+6
|
* Fix potential segfault condition in RC4_FREESimo Sorce2013-10-181-1/+1
|
* Fix generation of signing keys and add testsSimo Sorce2013-10-182-1/+184
|
* Fix symbols export regex to include gssspi_ too.Simo Sorce2013-10-181-1/+1
| | | | Thanks to David Woodhouse for finding out.
* Test acquire_cred_with_passwordSimo Sorce2013-10-171-12/+36
|
* Add support for gss_acquire_cred_with_password()Simo Sorce2013-10-173-0/+60
|
* Fix handling of NULL domainSimo Sorce2013-10-172-10/+17
| | | | | | | | | Fix segafult in NTOWFv2. When domain is NULL it is just omitted from the NTOWFv2 computation. Fix segfault in accept_sec_context, just make dom_name be an empty string. Fix also memory leaks.
* Fix acquiring creds via cred_storeSimo Sorce2013-10-171-0/+26
| | | | Make sure to set the cred type and copy in the name.
* Streamline spec file.Simo Sorce2013-10-171-22/+10
| | | | Fixes as requested by Fedora review
* Bump up version number afeter 0.1.0 releaseSimo Sorce2013-10-171-1/+1
|
* Correct upstream page in specSimo Sorce2013-10-141-2/+2
|
* Make version 0.1.0v0.1.0Simo Sorce2013-10-131-1/+1
|
* Fix typos in README.txtSimo Sorce2013-10-131-1/+1
|
* Add more tests.Simo Sorce2013-08-211-0/+30
| | | | Cover gss_inquire_context and gss_display_name implementations.
* Add gss_display_name implementationSimo Sorce2013-08-213-0/+85
|
* Add implementation of gss_inquire_contextSimo Sorce2013-08-214-0/+154
| | | | Also add source and target names to the context.
* Test Integrity and ConfidentialitySimo Sorce2013-08-191-0/+69
|
* Add integrity and confidentiality functionsSimo Sorce2013-08-1910-7/+548
|
* Add testsing of gssntlm mechglue functionsSimo Sorce2013-08-183-4/+138
|
* Basic implementation of accept_sec_contextSimo Sorce2013-08-188-41/+625
| | | | For now works only for satndalone server with access to a password file.
* Add support for server credentialsSimo Sorce2013-07-281-1/+40
|
* Add helper to copy names and gss_duplicate_nameSimo Sorce2013-07-283-0/+92
|
* Internal release nameSimo Sorce2013-07-282-9/+14
|
* Helper function to check lm compatibility levelSimo Sorce2013-07-284-17/+21
| | | | Also stop associating it with th creds struct.
* Fix message type checkSimo Sorce2013-07-283-5/+5
|
* Add gss_context_time() implementationSimo Sorce2013-07-283-1/+35
|
* Helper function to check security context validitySimo Sorce2013-07-283-0/+20
|
* Add expiration time checksSimo Sorce2013-07-282-0/+16
| | | | | | | | | Check Maxlife for challenge response messages. Also add a Maximum lifetime for the context itself based on the same challene/response maximum life. According to MS-NLMP MaxLifetime is 36h on modern Windows OSs, use the same for now.
* Add Credential Store supportSimo Sorce2013-07-283-84/+203
| | | | | This allows a program to feed crdentials directly to GSSAPI from a configuration file, or other means.
* Fix some commentsSimo Sorce2013-07-281-3/+2
|
* Fix target_info length calculationSimo Sorce2013-07-281-10/+10
| | | | | The size of the AV filed itself was missing for each field resulting in a shorter than needed buffer size.
* Always request NTLMSSP_REQUEST_TARGETSimo Sorce2013-07-191-0/+1
| | | | | | | Otherwise Windows 2003 may not return a target_info field for NTLMv2 or a server name for NTLMv1 in the challenge message. Thanks to David Woodhouse for providing help to debug this issue.
* Add README.txt with section on TestingSimo Sorce2013-07-192-5/+85
|
* Add NTLMv1 support to context initializationSimo Sorce2013-07-183-6/+73
|
* Add NTLM Crypto support functions for NTLMv1Simo Sorce2013-07-186-7/+713
|
* Add basic NTLMv2 crypto testsSimo Sorce2013-07-182-1/+556
|
* Implement basic naming functionsSimo Sorce2013-07-184-1/+311
|
* Implement credential handlingSimo Sorce2013-07-187-93/+298
|
* Initial GSS Mechanism code.Simo Sorce2013-07-185-2/+856
| | | | Implements init sec context and basic mechanism initialization.
* NTLM Crypto functionsSimo Sorce2013-07-1811-58/+1089
| | | | Adds crypto function helpers needed by NTLM authentication
* Initial NTLM message parsing librarySimo Sorce2013-07-163-0/+1723
| | | | Implements functions to encode/decode NTLMSSP packets