summaryrefslogtreecommitdiffstats
path: root/src/include/krb5.hin
Commit message (Collapse)AuthorAgeFilesLines
* install headers into include/krb5Ken Raeburn2006-05-231-2565/+0
| | | | | | | | | | | Create include/krb5 directory, and put krb5.h and (k5-)locate.h there in the build tree. Stub krb5.h in main include directory just includes krb5/krb5.h. Update dependencies, and add dependencies in a couple Makefiles that didn't have them. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18030 dc483132-0cff-0310-8789-dd5450dbe970
* Initial enhanced error message support, similar to what I sent toKen Raeburn2006-03-261-0/+15
| | | | | | | | | | | | | | | | krbdev except for some function renaming (krb5_free_error was already in use, so added _message to everything), and the context is allowed to be NULL (in which case we fall back to error_message() and storing no strings) to simplify some code. Low-level routines in the support library, using a private data structure; higher-level routines in libkrb5, using a krb5_context. Added error info strings to the KRB_ERR_GENERIC case in gc_via_tkt.c and the python sample service location plugin. Added code to kinit and kvno to look up and display the strings. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17776 dc483132-0cff-0310-8789-dd5450dbe970
* * Correct function prototypes that should have been using Jeffrey Altman2005-11-151-6/+6
| | | | | | | | | | | | | | krb5_timestamp in order to prevent type conflicts if krb5_timestamp ever becomes a 64-bit value * Force the use of 32-bit time_t with Microsoft's VS 2005 compiler on 32-bit platforms * Test for inclusion of krb5.h before k5-int.h ticket: 2883 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17488 dc483132-0cff-0310-8789-dd5450dbe970
* Implement RFC 3961 PRFSam Hartman2005-05-201-0/+7
| | | | | | | | | | | | | | Add krb5_c_prf, a function that implements the RFC 3961 PRF. As part of this change, the krb5_init_keyblock and krb5 free routines move to libk5crypto. Public stubs remain in libkrb5, but the actual implementation is an internal interface in libk5crypto ticket: new Tags: enhancement git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17219 dc483132-0cff-0310-8789-dd5450dbe970
* Add new function krb5_boolean krb5_is_thread_safe(void) to library.Jeffrey Altman2005-01-051-0/+2
| | | | | | | | | | | | | This function simply reports whether or not ENABLE_THREADS was specified at compile time. It is meant to be used by applications which need to know whether or not multithread libraries must be initialized OR whether or not calls to Kerberos library functions from multi-threaded applications must be protected by an application global mutex. ticket: new tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17003 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Flag krb5_principal2salt as KRB5_CALLCONV_WRONGTom Yu2004-12-211-1/+1
| | | | | | ticket: 2840 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16975 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (krb5_cc_get_flags): DeclareKen Raeburn2004-11-161-0/+3
| | | | | | | ticket: 2763 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16872 dc483132-0cff-0310-8789-dd5450dbe970
* krb5.hin: add new krb5_ccache flag, KRB5_TC_NOTICKETJeffrey Altman2004-09-091-0/+1
| | | | | | | | | when set, a krb5_ccache does not have to return a ticket within the returned credential ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16734 dc483132-0cff-0310-8789-dd5450dbe970
* Delete preprocessor tests for macintosh, __MWERKS__, applec, and THINK_C, allKen Raeburn2004-06-221-10/+1
| | | | | | | part of the pre-Mac OS X support. (Except the bits in the Yarrow code, where it was part of the upstream source.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16506 dc483132-0cff-0310-8789-dd5450dbe970
* Use more const data in the keytab type registryKen Raeburn2004-03-061-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16149 dc483132-0cff-0310-8789-dd5450dbe970
* Remove ENCTYPE_LOCAL_DES3_HMAC_SHA1Sam Hartman2004-02-241-3/+2
| | | | | | | | | | Previously, MIT had support for a version of the des3 enctype with a 32-bit length prepended to encrypted data. Remove that support. This is non-standard and is no longer needed even at MIT. Ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16122 dc483132-0cff-0310-8789-dd5450dbe970
* Add platform-dependent 64-bit and inline-function support via new headerKen Raeburn2003-12-131-1/+2
| | | | | | | | | | | | | | | k5-platform.h. Add 64-bit serializer support. [Not needed for ticket 1471, but needed for 2040 and annoying to check in separately.] Add to (internal for now) crypto API a function to get the mandatory checksum type associated with an enctype. New support for server-generated subkey, selected via an auth_context flag. ticket: 1471 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15908 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (struct _krb5_donot_replay, krb5_rc_default, krb5_rc_resolve_type)Ken Raeburn2003-08-261-50/+0
| | | | | | | | | | | (krb5_rc_resolve_full, krb5_rc_get_type, krb5_rc_default_type) (krb5_rc_default_name, krb5_auth_to_rep): Private declarations moved... * k5-int.h: ...to here. ticket: 1784 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15798 dc483132-0cff-0310-8789-dd5450dbe970
* krb5_get_host_realm and krb5_free_host_realm should not be labeled as ↵Jeffrey Altman2003-07-311-1/+1
| | | | | | | | | | | KRB5_PRIVATE. They are required for many applications including OpenAFS and UMich's Kx509. 1.2.8 had them public but the change was never reflected on the trunk. Ticket: 1702 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15747 dc483132-0cff-0310-8789-dd5450dbe970
* Export krb5_principal2saltAlexandra Ellwood2003-07-211-1/+1
| | | | | | ticket: 1679 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15701 dc483132-0cff-0310-8789-dd5450dbe970
* Export krb5_get_permitted_enctypes and krb5_set_real_time for SambaAlexandra Ellwood2003-07-091-2/+8
| | | | | | ticket: 1655 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15678 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: krb524_init_ets() takes one argumentTom Yu2003-06-121-1/+1
| | | | | | | | | | | * krb524.c (krb524_convert_creds_kdc, krb524_init_ets): Mark as KRB5_CALLCONV_WRONG. (krb524_init_ets): Takes a krb5_context. ticket: 1596 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15615 dc483132-0cff-0310-8789-dd5450dbe970
* Rename interface to krb5_524_convert_creds, export it from krb5 library.Ken Raeburn2003-05-281-6/+7
| | | | | | | | | | | | Provide old names as functions for UNIX/MacOS binary compatibility, and deprecated macros for source code compatibility. (For Windows, we'll still need a krb524.dll, and it can worry about providing the old names.) Enable support on Windows always. ticket: 1491 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15513 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Sequence number of krb5_replay_data should be unsignedEzra Peisach2003-05-251-1/+1
| | | | | | | ticket: 1262 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15493 dc483132-0cff-0310-8789-dd5450dbe970
* Big step towards integrating libkrb524 into libkrb5:Ken Raeburn2003-05-241-0/+7
| | | | | | | | | | | | | | | | | | | | | | | Move libkrb524 code, including error table, into libkrb5. Now libkrb5 initialization pulls in the krb524 error table, so krb524_init_ets is gone; all calls deleted. Move krb4 life/time conversion functions into libkrb5 under new names, using accessor hooks to get at them from libkrb4. Move declarations from krb524.h into krb5.h, k5-int.h, or krb524d.h; the last doesn't get copied into the include directory. Changed inclusions of krb524.h to the appropriate files, if any were needed. Rebuilt dependencies in Makefiles. These changes are likely to break the Windows build; I'll look into that soon. ticket: 1491 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15491 dc483132-0cff-0310-8789-dd5450dbe970
* Default KRB5_DEPRECATED to 0, but force it to 1 for in-tree stuffTom Yu2003-05-221-15/+6
| | | | | | | | ticket: 1483 tags: pullup status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15469 dc483132-0cff-0310-8789-dd5450dbe970
* Sequence numbers are now unsigned. Implement lenient parser forTom Yu2003-05-181-3/+3
| | | | | | | | | | | sequence numbers which folds received negative sequence numbers into positive unsigned numbers. Constrain the space of initial sequence numbers to facilitate backwards compatibility. ticket: 1262 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15457 dc483132-0cff-0310-8789-dd5450dbe970
* Define the new error codesKen Raeburn2003-05-171-0/+5
| | | | | | | | | * krb5.hin (KRB5_KPASSWD_ACCESSDENIED): New macro. (KRB5_KPASSWD_BAD_VERSION, KRB5_KPASSWD_INITIAL_FLAG_NEEDED): New macros. ticket: 1441 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15454 dc483132-0cff-0310-8789-dd5450dbe970
* * IMplement etype_info in KDC. If the request contains any newSam Hartman2003-05-121-1/+8
| | | | | | | | | | | | | | | | | | | | enctypes (currently AES but anything not explicitly listed as old) then only etype_info2 is sent back in response. Send back etype_info2 all the time. Also send back etype_info2 to provide salt and s2kparams with AS reply not just for preauth errors. * Expose interface for getting string2key with parameters (previously implemented but not exported) * IN the client (at least for get_init_creds interface) prfer etype_info2 to etype_info and pw_salt. Pass s2kparams and use string2key_with_params. Ticket: 1454 Status: open Target_Version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15412 dc483132-0cff-0310-8789-dd5450dbe970
* Rename the local_subkey and remote_subkey fields in the auth_contextTom Yu2003-05-101-5/+19
| | | | | | | | | | | | | | | | | to send_subkey and recv_subkey, respectively. Add new APIs to query and set these fields. Change the behavior of mk_req_ext, rd_req_dec, and rd_rep to set both subkeys. Applications wanting to set unidirectional subkeys may still do so by saving the values of subkeys and doing overrides. Cause mk_cred, mk_priv, and mk_safe to never use the recv_subkey. Cause rd_cred, rd_priv, and rd_safe to never use the send_subkey. ticket: 1415 status: open tags: pullup target_version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15407 dc483132-0cff-0310-8789-dd5450dbe970
* Implementation of Microsoft set password client library code providedSam Hartman2003-04-251-12/+8
| | | | | | | | | | by Paul Nelson. Ticket: 1377 Status: open Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15373 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.h: Removed enumsalwaysint because there are no typed enums in this ↵Alexandra Ellwood2003-03-061-5/+3
| | | | | | header. * k5-int.h: Removed Mac OS header goober. Added prototype for os_get_default_config_files which will be used by KfM's preference APIs (KFM needs to get the secure default files as well as the normal ones). Moved profile.h inclusion higher so it gets included before this function and thus its types are defined (the reason I put it where I did was there is another config file function next to it) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15247 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up PBKDF2 interface. Add s2k-params to string-to-key interface, exceptKen Raeburn2003-03-051-0/+4
| | | | | | | no new decl in krb5.h yet; rename changed s2k functions to use krb5int_ prefix. Add AES to etype table. Delete some unused declarations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15229 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (krb5_princ_component): Return NULL if going off the end of the arrayKen Raeburn2003-02-201-1/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15193 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (krb5_mk_req_checksum_func): Fix Windows calling convention syntaxKen Raeburn2003-01-171-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15127 dc483132-0cff-0310-8789-dd5450dbe970
* 2003-01-08 Sam Hartman <hartmans@mit.edu>Sam Hartman2003-01-081-2/+2
| | | | | | | * krb5.hin : Move KRB5_CALLCONV specifier for krb5_mk_req_checksum_func to right place git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15097 dc483132-0cff-0310-8789-dd5450dbe970
* Implement krb5_auth_con_set_checksum_func, an API for setting aSam Hartman2003-01-061-1/+16
| | | | | | | | | | callback to specify the data to be checksummed by krb5_mk_req after the auth_context has been set up. Mainly useful for GSSAPI. Ticket: 1054 Status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15084 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up some broken uses of "const" in function interfacesKen Raeburn2002-12-191-25/+25
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15058 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Update comment on krb5_kt_free_entry prototype toTom Yu2002-12-121-1/+1
| | | | | | point at the correct recommended function. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15044 dc483132-0cff-0310-8789-dd5450dbe970
* * k5-int.h (krb5_ser_handle): Now points to const.Ken Raeburn2002-10-311-1/+1
| | | | | | | | | | | | | | | (krb5_kt_dfl_ops): Now const. (struct _krb5_kt_ops): Field serializer now points to const krb5_ser_entry instead of void. * krb5.hin (struct _krb5_kt): Field ops now points to const. * kt_file.c (krb5_ktf_ops, krb5_ktf_writable_ops): Now const. Drop cast of serializer entry initializer. (fopen_mode_rbplus, fopen_mode_rb): Now const. * kt_srvtab.c (krb5_kts_ops): Now const. * ktbase.c (krb5_ktf_ops, krb5_kts_ops): Update declarations. (struct krb5_kt_typelist): Field ops now points to const. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14953 dc483132-0cff-0310-8789-dd5450dbe970
* Wrong ASN.1 definition and padata type for new hardware preauthKen Hornstein2002-10-301-2/+5
| | | | | | | | | | | | | | | It turned out that early in the development cycle, one of our developers picked the "next" PADATA type in krb5.hin, and we said, "We've got to fix that when we get the real one assigned" ... and we never did. Noticed by Ezra Peisach. Also, the definition for sam-pk-for-sad was changed to OCTET STRING from EncryptionKey in the draft and the code, but we never updated the ASN.1 definition. Also noticed by Ezra Peisach. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14945 dc483132-0cff-0310-8789-dd5450dbe970
* Client code lacks support for draft-ietf-krb-wg-kerberos-sam-01.txtKen Hornstein2002-10-241-0/+8
| | | | | | | | | | | This widely-spread commit implements support for the so-called "new" hardware preauth protocol, defined in the IETF internet-draft draft-ietf-krb-wg-kerberos-sam-01.txt. Note that this code is client-side only. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14939 dc483132-0cff-0310-8789-dd5450dbe970
* No support for negative password expiration last-req hintKen Hornstein2002-10-241-1/+2
| | | | | | | | | Fixing an omission; previous code didn't support a negative value for the password expiration hint (which is legal). Pointed out by Ezra Peisach. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14938 dc483132-0cff-0310-8789-dd5450dbe970
* gic_pwd doesn't support password expiration notification via last_req hintKen Hornstein2002-10-231-0/+1
| | | | | | | | | | | | | | In kerberos-clarifications, a new last-req type (6) has been specified that indicates when a principal's password will expire. This code implements support for this last-req type. Note that the intent is that the last-req type will only be included by the KDC when the time until password expiration reaches some threshold (e.g, one week), so this code will display the password expiration anytime the last-req type is included. ticket: 1065 ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14936 dc483132-0cff-0310-8789-dd5450dbe970
* Put # for cpp directives in first columnKen Raeburn2002-07-091-24/+24
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14624 dc483132-0cff-0310-8789-dd5450dbe970
* Oops, missed oneTom Yu2002-06-221-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14558 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Fix up yet more CALLCONV botches from last mergeTom Yu2002-06-211-7/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14557 dc483132-0cff-0310-8789-dd5450dbe970
* Fix missed pullup of kt_free_entry -> free_keytab_entry_contentsTom Yu2002-06-181-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14529 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Delete inclusion of profile.h againKen Raeburn2002-06-151-6/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14515 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Conditionalize KRB5_CALLCONV_WRONG separatelyTom Yu2002-06-151-16/+54
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | because gssapi.h defines KRB5_CALLCONV but doesn't need KRB5_CALLCONV_WRONG [pullup from 1-2-2-branch] * krb5.hin: Rename krb5_kt_free_entry_contents as krb5_free_keytab_entry_contents to make it consistent with rest of API. Add KRB5_CALLCONV_WRONG. Fix up various calling conventions. For Win32, add KT an CC accessors and default to not PRIVATE. * krb5.hin: Make krb5_build_principal_va() KRB5_CALLCONV. [pullups from 1-2-2-branch] * krb5.hin: Conditionalized pragmas for Metrowerks * krb5.hin: Updated Mac OS X headers to new framework layout [pullups from 1-2-2-branch] * krb5.hin: Updated Mac OS #defines and #includes for new header layout and Mac OS X frameworks [pullups from 1-2-2-branch] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14513 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Fix BEGIN_DECLS conditionalTom Yu2002-06-151-1/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14511 dc483132-0cff-0310-8789-dd5450dbe970
* Reduce build-time per-system dependencies and krb5.h namespace intrusionsKen Raeburn2002-05-251-29/+18
| | | | | | | | | | | | | | * krb5.hin: Don't include profile.h. Do include limits.h. (krb5_int16, krb5_ui_2, krb5_int32, krb5_ui_4): Conditionalize on the values of INT_MAX, LONG_MAX and SHRT_MAX. (VALID_INT_BITS, VALID_UINT_BITS, SALT_TYPE_AFS_LENGTH, SALT_TYPE_NO_LENGTH): Define in terms of INT_MAX and UINT_MAX. (struct _profile_t): Declare forward. (krb5_get_profile): Use struct _profile_t instead of profile_t in declaration. (krb5_ui_1): Delete. * Makefile.in (krb5.h): Don't put SIZEOF macros into output. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14451 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin (krb5_c_valid_enctype, krb5_c_valid_cksumtype,Ken Raeburn2002-04-061-0/+10
| | | | | | krb5_c_is_coll_proof_cksum, krb5_c_is_keyed_cksum): Declare. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14365 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Default to KRB5_DEPRECATED=1, allowing compilerTom Yu2002-04-031-8/+20
| | | | | | | | command line to override. Hide some struct definitions. Use KRB5INT_BEGIN_DECLS and KRB5INT_END_DECLS to deal with C++ function declarations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14329 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Move a whole bunch of stuff under KRB5_DEPRECATED orTom Yu2002-04-021-9/+81
| | | | | | KRB5_PRIVATE as a first pass for cleaning up the API. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14320 dc483132-0cff-0310-8789-dd5450dbe970