| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13181 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
not the session key.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13180 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13179 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13176 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13163 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13160 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12965 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
* in_tkt.c: Clean up uid handling. Fix stat checks.
* tf_util.c: Clean up uid handling. Fix stat checks.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12954 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12950 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
* prot_common.c (krb4prot_decode_header): Decode the first two
bytes of a krb4 packet.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12949 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
* prot_kdc.c: Fix up some error returns. Add
decode_kdc_request().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12941 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12934 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
* g_in_tkt.c: Fix error packet parsing. Also, declare some
internal functions as static and add prototypes.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12914 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
convention.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12865 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* cr_auth_repl.c: Audit. Fix up copyright. Use new KRB4_PUT*
macros for encoding so output is always big-endian. Precompute
string lengths for better length-checking.
* cr_ciph.c: Audit. Fix up copyright. Use new KRB4_PUT* macros
for encoding so that output is always big-endian. Precompute
string lengths for better length-checking. Zero out the key
schedule after encrypting.
* cr_death_pkt.c: Audit. Fix up copyright. Precompute string
lengths for better length-checking.
* cr_err_repl.c: Audit. Fix up copyright. Use moving pointer to
do encoding. Precompute string lengths for better
length-checking. Use KRB4_PUT* macros so that output is always
big-endian.
* cr_tkt.c: Audit. Fix up copyright. Use KRB4_PUT* macros for
encoding so that output is always big-endian. Zero out the key
schedule after encrypting.
* decomp_tkt.c: Audit. Fix up copyright. Use krb_strnlen() for
actually detecting string length errors. Use a struct in_addr to
retrieve the IP address and assign it to paddress for return. Use
KRB4_GET* macros for decoding to avoid byteswapping problems.
Zero out session key and decrypted ticket on error.
* g_ad_tkt.c: Audit. Fix up copyright. Break out parsing of
decrypted KDC reply packet into a separate function to simplify
error handling somewhat. Precompute string lengths for better
length-checking. Use KRB4_PUT* macros for encoding so that output
is always big-endian. Use KRB4_GET* macros for decoding to avoid
byteswapping problems. Stomp on session key on error conditions.
* g_in_tkt.c: Audit. Fix up copyright. Precompute string lengths
for better length-checking. Use KRB4_PUT* macros for encoding so
output is always big-endian. Use KRB4_GET* macros for decoding to
avoid byteswapping problems. Use krb_strnlen() to actually detect
string length errors. Zero out session key and decrypted KDC
reply once they're no longer useful.
* mk_auth.c: Audit. Fix up copyright. Use moving pointer for
encoding. Use KRB4_PUT* macros for encoding to avoid alignment
issues with using memcpy(). Use KRB4_GET* macros for decoding to
avoid alignment issues with using memcpy().
* mk_err.c: Audit. Fix up copyright. Precompute string length.
Use KRB4_PUT* macros to always encode as big-endian.
* mk_preauth.c: Audit. Zero out key schedule after encryption.
* mk_priv.c: Audit. Fix up copyright. Use KRB4_PUT* macros for
encoding so output is always big-endian.
* mk_req.c: Audit. Fix up copyright. Use moving pointer for
encoding. Precompute string lengths for better length-checking.
Use KRB4_PUT* macros for encoding so output is always big-endian.
Zero out session key after encryption.
* mk_safe.c: Audit. Fix up copyright. Use KRB4_PUT* macros for
encoding so output is always big-endian.
* rd_err.c: Audit. Fix up copyright. Use KRB4_GET* macros to
avoid alignment issues.
* rd_preauth.c: Audit. Zero key schedule after decrypting.
* rd_priv.c: Audit. Fix up copyright. Use KRB4_GET* macros to
avoid alignment issues.
* rd_req.c: Audit. Fix up copyright.
* send_to_kdc.c (send_recv): Actually set rpkt->length, since some
callers actually use it now to do length-checking.
* strnlen.c: New file; compute string length, bounded by a
maximum. If the maximum number of characters has been read
without encountering a NUL character, return -1. This makes
overflow checking of strings in buffers much easier.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12859 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
AC_CONST and AC_HAVE_FUNCS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12834 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
a cast of session key to C_Block *, since CNS is inconsistent in
this area as well.
* mk_priv.c (krb_mk_priv): Align with CNS by taking C_Block *.
* mk_safe.c (krb_mk_safe): Align with CNS by taking C_Block *.
* rd_priv.c (krb_rd_priv): Align with CNS by taking C_Block *.
* rd_safe.c (krb_rd_safe): Align with CNS by taking C_Block *.
* recvauth.c (krb_recvauth): Update call to mk_priv() to have the
correct type.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12805 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
void as int (autoconf can handle that).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12750 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12734 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
* g_tkt_svc.c (CredIsExpired): Call life_to_time().
* lifetime.c: Add comments for lifetimes[]. Add provisions for
compile-time switching of short lifetimes. Fix sign bug in
time_to_life().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12727 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
to umask.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12724 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
for read/write prototypes.
* in_tkt.c: Argument to umask should be of type uid_t.
* configure.in: Test for uid_t (AC_TYPE_UID_T).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12723 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
* lifetime.c: New file. For the purposes of CMU and AFS
compatibility, this implements the exponential krb4 ticket
lifetimes for lifetime values above 127, in the krb_life_to_time()
and krb_time_to_life() functions. Values 127 and below are still
treated normally.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12644 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
encryption type is a non-raw des3 key, bash its enctype. This
matches kdc/kerberos_v4.c.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12624 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
for functions exported prototypes in krb.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12599 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
To be compatible with krb.h changes for windows.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12579 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
given principal. It is like in_tkt() but it is public and also
takes a realm for credentials caches that require a full
principal name (e.g., CCAPI).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12574 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
given principal. It is like in_tkt() but it is public and also
takes a realm for credentials caches that require a full
principal name (e.g., CCAPI).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12557 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12529 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
before being used.
* getst.c: Remove unused variable.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12459 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12442 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12331 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* decomp_tkt.c: (dcmp_tkt_int): Add static prototype
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12125 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11877 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11858 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11770 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11655 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11432 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
krb5_srvtab value from profile, instead of always ignoring it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11363 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11284 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
the appropaite krb5 keytab file for the key to be used by the krb4
library.
rd_req.c (krb_rd_req): If the appropriate key cannot be found in the
krb4 srvtab file, try calling krb54_get_service_keyblock.
decomp_tkt.c (dcmp_tkt_int):
g_in_tkt.c (krb_mk_in_tkt_preauth):
g_ad_tkt.c (get_ad_tkt):
pkt_clen.c (pkt_clen):
rd_err.c (krb_rd_err):
rd_priv.c (krb_rd_priv):
rd_req.c (krb_rd_req):
rd_safe.c (krb_rd_safe): Use krb4_swab32 and krb4_swab16 instead of
swap_u_long and swap_u_short. The new byte swapping routines are
faster and cleaner.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11067 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11066 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
* rd_svc_key.c (read_service_key): Don't call krb5_kt_close() if
krb5_kt_resolve() fails, so we don't segfault if the keytab name
is invalid.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10800 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
* mk_safe.c (krb_mk_safe): Fix up call to quad_cksum().
* tf_util.c (tf_init): Add call to getuid() to initialize me.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10787 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
* tf_util.c (tf_init): Fixed a potential race condition in the opening
of v4 ticket files. tf_init() was calling lstat() followed by fopen().
Now it calls fopen() and then calls lstat() and fstat() to check file
ownership and to check that it opened the file it thought it did. I
patched the shared memory code similarly, but since nothing uses it I
don't have a good way to test it properly.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10629 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
taking the address of key, the 5th arg to pcbc_encrypt() was
actually a (char **) cast to a (C_Block *). The reason for this
is that a C_Block (actually a des_cblock) is typedef'ed from a
char[8], which by being in the parameters of the definition of
krb_mk_priv() becomes of type (char *). This means that using the
address operator on key resulted in a pointer to a pointer to a
char rather than a pointer to a des_cblock, which would have been
innocuous in this case because pcbc_encrypt() actually takes a
(des_cblock *) as the 5th (ivec) argument. The moral is to never
pass around naked arrays as function arguments; instead, pass
around pointers to arrays to avoid spontaneous conversions to
pointers sneaking up. Note that CNS actually uses a (C_Block *)
everywhere, and maybe we should as well. *whew*
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10603 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
log.c (krb_new_log, krb_log):
klog.c (klog): Print the year using 4 digits to avoid Y2K issues.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10558 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
(SHLIB_EXPLIBS): Rename libcrypto -> libk5crypto.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10532 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
/krb_err.h.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10525 dc483132-0cff-0310-8789-dd5450dbe970
|