summaryrefslogtreecommitdiffstats
path: root/src/windows
Commit message (Collapse)AuthorAgeFilesLines
...
* 2004-12-18 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-12-182-41/+78
| | | | | | | | | | | | * kfw-fixed.nsi: Add "Debug Symbols" as a new category. It defaults to on in debug builds and off in release builds. ticket: new tags: pullup target_version: 1.4 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16954 dc483132-0cff-0310-8789-dd5450dbe970
* Update for WiX 2.1 installerJeffrey Altman2004-12-155-7/+10
| | | | | | ticket: 2805 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16938 dc483132-0cff-0310-8789-dd5450dbe970
* 2004-12-15 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-12-155-0/+54
| | | | | | | | Add kcpytkt.exe, kdeltkt.exe, k5sprt32.dll, mit2ms.exe ticket: 2805 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16936 dc483132-0cff-0310-8789-dd5450dbe970
* 2004-12-15 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-12-152-1/+5
| | | | | | | | rename krb5support_32.dll to k5sprt32.dll ticket: 2804 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16934 dc483132-0cff-0310-8789-dd5450dbe970
* Create new C CCAPI implementationJeffrey Altman2004-10-272-0/+9
| | | | | | ticket:new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16839 dc483132-0cff-0310-8789-dd5450dbe970
* * update the include paths to allow patchlevel.h to be foundJeffrey Altman2004-10-016-4/+16
| | | | | | ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16798 dc483132-0cff-0310-8789-dd5450dbe970
* * update ChangelogJeffrey Altman2004-10-011-0/+4
| | | | | | ticket: 2729 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16797 dc483132-0cff-0310-8789-dd5450dbe970
* * Add new conditional resource stringsJeffrey Altman2004-10-011-1/+26
| | | | | | ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16796 dc483132-0cff-0310-8789-dd5450dbe970
* Make patchlevel.h be the master version fileTom Yu2004-09-252-7/+25
| | | | | | | ticket: 1345 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16790 dc483132-0cff-0310-8789-dd5450dbe970
* * kfw-fixed.nsi:Jeffrey Altman2004-09-172-0/+63
| | | | | | | | | | | The version of MSIEXEC which ships with Windows 2000 does not accept the /passive and /promptreboot command line options. On Windows 2000 only, do not specify them. ticket: new tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16763 dc483132-0cff-0310-8789-dd5450dbe970
* Remove trailing slash from PATHJeffrey Altman2004-09-173-23/+190
| | | | | | | | | | | Minimize Leash32.exe on startup Update msi-deployment guide to explain how to replace the configuration files in greater detail ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16761 dc483132-0cff-0310-8789-dd5450dbe970
* Enable default installation of documentationJeffrey Altman2004-09-142-1/+5
| | | | | | ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16754 dc483132-0cff-0310-8789-dd5450dbe970
* * kfw-fixed.nsi:Jeffrey Altman2004-09-132-3/+99
| | | | | | | | | Detect the Wix MSI, the SWRT MSI, and the Pismere MSI If found, uninstall the MSI before installing NSIS ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16749 dc483132-0cff-0310-8789-dd5450dbe970
* Add msi-deployment-guide.txtJeffrey Altman2004-09-132-0/+371
| | | | | | ticket: 2707 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16744 dc483132-0cff-0310-8789-dd5450dbe970
* Updates to WiX to satisfy the needs of MIT SWRTJeffrey Altman2004-09-136-6/+299
| | | | | | ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16743 dc483132-0cff-0310-8789-dd5450dbe970
* utils.nsi: Fix RestartRequired function to actually determineJeffrey Altman2004-09-112-33/+112
| | | | | | | | | | | | | | if a restart is required kfw-fixed.nsi: - Add support for compiler version 1400 - Fix terminal server key deletions - Delete leash32.exe on uninstall - Correct the logic of the call of RestartRequired ticket: 2702 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16742 dc483132-0cff-0310-8789-dd5450dbe970
* ms2mit.c: Apply KRB5_TC_NOTICKET to MSLSA: while searching for theJeffrey Altman2004-09-092-0/+19
| | | | | | | | presence of an initial ticket to copy to the MIT cache ticket: 2688 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16733 dc483132-0cff-0310-8789-dd5450dbe970
* Include all subdirectories of KFW_INSTALL_DIR in the SDKJeffrey Altman2004-09-072-1/+6
| | | | | | | ticket: new tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16723 dc483132-0cff-0310-8789-dd5450dbe970
* * ms2mit.c: add -c ccache command line optionJeffrey Altman2004-09-024-4/+198
| | | | | | | | | * mit2ms.c: new command. Copies contents of the mit ccache to the MSLSA: ccache ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16713 dc483132-0cff-0310-8789-dd5450dbe970
* ChangeLogs for WiX MSI installerJeffrey Altman2004-08-204-0/+12
| | | | | | ticket: 2675 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16676 dc483132-0cff-0310-8789-dd5450dbe970
* New WiX based MSI installer for KFWJeffrey Altman2004-08-2023-0/+3396
| | | | | | | | | | Requires WiX 2.0.1927.1 patched by Asanka. http://prdownloads.sourceforge.net/wix/sources-2.0.1927.1.zip ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16675 dc483132-0cff-0310-8789-dd5450dbe970
* kfw-fixed.nsi: Add registry keys to allow KFW executables to access theJeffrey Altman2004-07-082-0/+36
| | | | | | | | | | krb5.ini and other config files in the %WINDIR% directory instead of the per-user WINDOWS directory created in the user's profile ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16561 dc483132-0cff-0310-8789-dd5450dbe970
* * kfw-fixed.nsi: Microsoft did not place the AllowTGTSessionKey inJeffrey Altman2004-07-072-0/+12
| | | | | | | | | | the same location within the registry on the XP client platform as they did on the 2000 SP4 and 2003 Servers. Modify the installer to set both locations. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16553 dc483132-0cff-0310-8789-dd5450dbe970
* * version.rc: Add info for support libraryKen Raeburn2004-06-182-0/+15
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16484 dc483132-0cff-0310-8789-dd5450dbe970
* * kfw.nsi, kfw-fixed.nsi, utils.nsi:Jeffrey Altman2004-05-174-188/+241
| | | | | | | | | | | | - replace the UpdateDLL macro with the ReplaceDLL macro - use ReplaceDLL to install all .exe and .dll files this will allow the installer to work even when some files are loaded by modules which cannot be terminated such as Network Providers (afslogon.dll for example) ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16340 dc483132-0cff-0310-8789-dd5450dbe970
* Changes to the NSIS installer for Windows to support KFW 2.6.1Jeffrey Altman2004-04-143-6/+25
| | | | | | | | | | | Adds kvno.exe, gss-client.exe, and gss-server.exe to the distribution Increments the version number of the installer ticket: new tags: pullup target_version: 1.3.4 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16249 dc483132-0cff-0310-8789-dd5450dbe970
* 2004-03-31 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-03-3111-0/+2789
| | | | | | | | Add the KFW 2.6 NSIS installer scripts to the repository ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16216 dc483132-0cff-0310-8789-dd5450dbe970
* Change subdir processing so that SUBDIRS will contain the configuredKen Raeburn2004-03-082-1/+4
| | | | | | | | | | | | | | subdirs only for the makefile in the directory with the configure script, and will have only $(LOCAL_SUBDIRS) elsewhere. Drop the use of "MY_SUBDIRS=." to override SUBDIRS in favor of this way of keeping SUBDIRS empty. Drop other uses of MY_SUBDIRS in favor of LOCAL_SUBDIRS or (in one case, the top level) overriding the SUBDIRS setting from pre.in. One less thing to keep tweaking as configure scripts get reorganized and merged. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16158 dc483132-0cff-0310-8789-dd5450dbe970
* 2004-02-12 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-02-122-3/+7
| | | | | | | | | | * Fix libpath for krbcc32.lib (only affects KRB5_KFW_COMPILE builds) ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16065 dc483132-0cff-0310-8789-dd5450dbe970
* Add missing file: gss-misc.h copied from src/appl/gss-sampleJeffrey Altman2004-02-112-0/+64
| | | | | | | | ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16062 dc483132-0cff-0310-8789-dd5450dbe970
* update copyright notices on gss sample appsTom Yu2004-02-113-0/+69
| | | | | | | | | | update copyrights ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16056 dc483132-0cff-0310-8789-dd5450dbe970
* 2004-02-06 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-02-066-25/+80
| | | | | | | | | | | | | * Add new UI components to the gss.exe client to support the use of GSS_C_SEQUENCE_FLAG or to disable the use of either GSS_C_MUTUAL_FLAG or GSS_C_REPLAY_FLAG ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16024 dc483132-0cff-0310-8789-dd5450dbe970
* Add support for specifying the credential cache to be used as wellJeffrey Altman2004-02-057-37/+160
| | | | | | | | | | as fix a few minor user interface bugs ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16021 dc483132-0cff-0310-8789-dd5450dbe970
* * Update README to describe the new PreserveInitialTicketIdentityJeffrey Altman2004-02-022-0/+41
| | | | | | | | registry key. ticket: 2139 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15996 dc483132-0cff-0310-8789-dd5450dbe970
* missing headerJeffrey Altman2004-02-011-0/+3
| | | | | | ticket: 2183 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15995 dc483132-0cff-0310-8789-dd5450dbe970
* * Do not perform ticket importing if the initial TGT is not availableJeffrey Altman2004-02-012-2/+48
| | | | | | | | | | | from the MSLSA krb5_ccache. This will be the case if the session key enctype is NULL. (AllowTGTSessionKey regkey = 0) ticket: new target: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15994 dc483132-0cff-0310-8789-dd5450dbe970
* Add support for Addressless Ticket Checkbox. Applied patch from Doug EngertJeffrey Altman2004-01-317-4/+29
| | | | | | | | ticket: 982 tags: pullup target_version: 1.3.2 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15989 dc483132-0cff-0310-8789-dd5450dbe970
* 2004-01-30 Jeffrey Altman <jaltman@mit.edu>Jeffrey Altman2004-01-312-2/+42
| | | | | | | | | | Update the README file to include details on the new Windows registry key necessary to access the TGT session key when importing from MSLSA. Also, include compatibility details regarding the gss sample client and the Microsoft Platform SDK distributed versions. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15988 dc483132-0cff-0310-8789-dd5450dbe970
* A near complete re-write of the gss sample client on windows. Supports theJeffrey Altman2004-01-318-386/+1295
| | | | | | | | | | | | | | | | | current protocol implemented in the Unix gss sample applications as well as a new User Interface making this one neat testing tool. There are still many little kinks to get out in a future version. The sliders for the Call Count and the Message Count do not have text strings indicating their current value. They slide from 1 to 20. And the known Mechanism strings should be accessible in the drop down list. A documentation file on how to use the tool would be a good addition. ticket: 2144 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15987 dc483132-0cff-0310-8789-dd5450dbe970
* * README: update requirements for compilation tools, DNS supportJeffrey Altman2003-12-222-23/+119
| | | | | | | | | | | and describe new MSLSA: credential cache and how to configure Windows to use it. ticket: new target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15959 dc483132-0cff-0310-8789-dd5450dbe970
* * Added new krb5_ccache type "MSLSA" for Windows only.Jeffrey Altman2003-12-123-830/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This new ccache type provides an interface for the MIT krb5_cc api functions to be used to access the contents of the MS Kerberos LSA cache. The ccache type is read-only because the MS Kerberos LSA does not allow third party applications to insert credentials into the cache. The primary motivation of this work was to encapsulate the complex operations necessary to manipulate the MS Kerberos LSA. The code was far from trivial and was often implemented incorrectly. Worse still was the fact that each version of Windows since W2K modified the use of the LSA API. The code which was originally donated in the form of ms2mit.c had many memory and handle leaks which were acceptable for a one time application such as ms2mit.c. Unfortunately, this code has started to appear in many other applications: KfW's Leash, the AFS Wake systray tool, and others. By using the new MSLSA ccache the implementation of ms2mit.c went from 890 lines to 50 lines of code and comments. All that is necessary is for the MSLSA ccache to be resolved and for its contents to be copied with krb5_cc_copy_creds to the default ccache. The MSLSA ccache implements all of the functions of a ccache except those which would be used to store data into the ccache. When a write attempt is performed the new error KRB5_CC_READONLY is returned. The residual portion of the MSLSA ccache name is current ignored but preserved. If you ask for ccache "MSLSA:myname" you will be given access to the LSA cache for the current Logon Session. If you later ask for the name of the ccache you will be returned the same name. In the future, the residual might be used to provide information necessary to identify a specific logon session whose cache it is desired to access. If this is ever done, the applications which use it will have to possess the SeTcbPrivilege privilege. Using KfW's Leash it is now possible to set the Krb5 credential cache to "MSLSA:" and use it to monitor the contents of the MS Kerberos LSA cache. As part of adding this functionality, krb5_32.dll is not linked against the "secur32.lib" library as the Lsa security sdk routines are stored in the SECUR32.DLL file. ticket: 2049 target_version: 1.3.2 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15886 dc483132-0cff-0310-8789-dd5450dbe970
* Because of the failure of Windows 2000 and Windows XP to perform properJeffrey Altman2003-10-212-2/+28
| | | | | | | | | | | | | | | | | | | | ticket expiration time management, the MS Kerberos LSA will return tickets to a calling application with lifetimes as short as one second. Tickets with lifetimes less than five minutes can cause problems for most apps. Tickets with lifetimes less than 20 minutes will trigger the Leash ticket lifetime warnings. Instead of accepting whatever tickets are returned by MS LSA from the cache, if the ticket lifetime is less than 20 minutes force a retrieval operation bypassing the LSA ticket cache. ticket: 1962 target_version: 1.3.2 tags: pullup owner: jaltman@mit.edu status: resolved git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15843 dc483132-0cff-0310-8789-dd5450dbe970
* * README: Revert previous change, as it was in error; socklen_tTom Yu2003-07-222-3/+10
| | | | | | | | | | was introduced in Aug 2001 Platform SDK, and the actual problem reported was very probably a compilation environment misconfiguration. ticket: 1675 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15721 dc483132-0cff-0310-8789-dd5450dbe970
* Windows build needs Feb 2003 Platform SDKTom Yu2003-07-192-3/+8
| | | | | | | | | | | | | * README: Note requirement for Feb 2003 Platform SDK. Thanks to Doug Engert and Rodney Dyer. ticket: 1675 component: krb5-doc version_reported: 1.3 target_version: 1.3.1 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15698 dc483132-0cff-0310-8789-dd5450dbe970
* * ms2mit.c:Jeffrey Altman2003-07-182-75/+432
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Functional changes: (1) do not restrict ourselves to DES-CBC-CRC instead support any ticket with an enctype we support. as of this date (rev 1.3) this includes all but RC4-MD4. (2) do not accept invalid tickets (3) when attempting to retrieve tickets do not specify either the enctype or cache options (if possible). doing so will force a TGS request and prevent the results from being stored into the cache. (4) when the LSA cache contains a TGT which has expired Microsoft will not perform a new TGS request until the cache has been purged. Instead the expired ticket continues to be used along with its embedded authorization data. When PURGE_ENABLED is defined, if the tickets are expired, the cache will be purged before requesting new tickets, else we ignore the contents of the cache and force a new TGS request. (5) when the LSA cache is empty do not abort. On XP or 2003, use the SecurityLogonSessionData to determine the Realm (UserDnsDomain in MS-speak) and request an appropriate TGT. On 2000, check the Registry for the HKCU\"Volatile Environment":"USERDNSDOMAIN" instead. This will allow ms2mit to be used to repopulate the LSA cache. If the current session is not Kerberos authenticated an appropriate error message will be generated. Code changes: (1) several memory leaks plugged (2) several support functions copied from the Leashw32.dll sources (3) get_STRING_from_registry() uses the ANSI versions of the Registry functions and should at a later date be converted to use the Unicode versions. Notes: an ms2mit.exe based on the Leash_import() function should be considered. Leash_import() not only imports the TGT from the LSA but also performs the krb524 conversion and AFS token retrieval. Of course, that version of ms2mit.exe could not exist within the krb5 source tree. ticket: 1667 target_version: 1.3.1 tags: pullup owner: jaltman@mit.edu status: resolved git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15696 dc483132-0cff-0310-8789-dd5450dbe970
* apply patch from jaltman:Tom Yu2003-06-242-5/+12
| | | | | | | | | | | | * ms2mit.c: Windows Credentials are addressless. Do not store the credentials in the MIT cache with addresses since they do not contain addresses in the encrypted portion of the credential. Instead generate a valid empty address list. ticket: 1618 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15648 dc483132-0cff-0310-8789-dd5450dbe970
* Handle NULL result_string->data returned from error inTom Yu2003-02-252-1/+7
| | | | | | | | | | | | krb5_change_password(). The SAMDATA() macro in lib/krb5/krb/preauth2.c seems to already be fixed. KfM's kpasswd equivalent still needs to be dealt with. ticket: 1055 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15204 dc483132-0cff-0310-8789-dd5450dbe970
* ver.h to winver.h ver.h has become depricated by MS. Using winver.h will ↵Paul Hill2002-10-162-2/+2
| | | | | | support MSVC 6 and 7 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14929 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Revert $(S)=>/ change, for Windows supportKen Raeburn2002-08-292-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14786 dc483132-0cff-0310-8789-dd5450dbe970
* Change $(S)=>/ and $(U)=>.. globallyKen Raeburn2002-08-232-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14761 dc483132-0cff-0310-8789-dd5450dbe970