summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
...
* * d3_str2ky.c: Updated to include some of the randomness throughoutRichard Basch1995-12-121-7/+3
| | | | | | | the entire key. The second 3-DES CBC encryption of the block should use an ivec of the last cipher block. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7208 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up repository - don't check in configure add .Sanitize and .cvsignoreEzra Peisach1995-12-123-1009/+38
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7205 dc483132-0cff-0310-8789-dd5450dbe970
* * TODO: Done: keytab routines to access to database.Chris Provenzano1995-12-122-0/+12
| | | | | | Todo: Create a real krb5_db_context after 1.0 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7204 dc483132-0cff-0310-8789-dd5450dbe970
* New directory for the kdb keytab functions. Currently there is only get andChris Provenzano1995-12-124-0/+1156
| | | | | | | | resolve but these are sufficient to remove the ugly hack where the key is passed to krb5_rd_req() in the user-to-user field of the auth_context. These functions do NOT need to be built on the Macintosh or Windows systems. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7203 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in : Added subdirectory dbChris Provenzano1995-12-122-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7202 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_dbm.c : Move the krb5_db_context to include/krb5/kdb_dbc.h.Chris Provenzano1995-12-122-79/+113
| | | | | | | | | | * kdb_dbm.c krb5_dbm_db_set_mkey(), krb5_dbm_db_get_mkey(): Functions for associating a master key (krb5_encrypt_block *) to a krb5_db_context. Currently it associates it to the krb5_context and will be fixed once the krb5_db_context is better defined (Post 1.0). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7201 dc483132-0cff-0310-8789-dd5450dbe970
* * extern.h: Added a krb5_keytab to the realm context. The keytabChris Provenzano1995-12-124-14/+50
| | | | | | | | | | should be associated with a krb5_db_context which will make having a krb5_context unnecessary in the realm context. * kdc_util.c kdc_process_tgs_req(): Use the realm keytab instead of faking up a user-to-user key to pass to krb5_rd_req_decode(). * main.c: Added code to use the new database keytab routines. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7200 dc483132-0cff-0310-8789-dd5450dbe970
* * adm.h: Added principal flag keywords KRB5_ADM_KW_SETFLAGS andChris Provenzano1995-12-124-0/+75
| | | | | | | | | | | KRB5_ADM_KW_UNSETFLAGS because relative flag modification is just a good idea. * kdb.h: typedef kdb5_dispatch_table so prototypes that need it compile even if KDB5_DISPATCH isn't defined. * kdb_dbc.h: The start of the database context, which should be removed from the krb5_context. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7199 dc483132-0cff-0310-8789-dd5450dbe970
* * main.c: Use the master key enctype from the stash file if noneRichard Basch1995-12-121-10/+12
| | | | | | is specified (set the keyblock enctype to NULL). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7198 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb5_edit.c: Use the master key enctype from the stash file if noneRichard Basch1995-12-121-11/+18
| | | | | | is specified (set the keyblock enctype to NULL). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7197 dc483132-0cff-0310-8789-dd5450dbe970
* * fetch_mkey.c: If the keyblock is initialized with an enctype ofRichard Basch1995-12-121-1/+3
| | | | | | | NULL, simply read in the enctype from the stash file and don't try to check it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7196 dc483132-0cff-0310-8789-dd5450dbe970
* * krb524d.c: Rely on stashed master key enctype instead of hardcodingRichard Basch1995-12-121-2/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7195 dc483132-0cff-0310-8789-dd5450dbe970
* * d3_str2ky.c: Revised 3-DES String-To-Key algorithm to encrypt theRichard Basch1995-12-121-1/+8
| | | | | | folded result twice in the folded key. [Courtesy Uri Blumenthal] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7194 dc483132-0cff-0310-8789-dd5450dbe970
* * kdc_preauth.c return_padata(): Initialize local variable "size"Chris Provenzano1995-12-112-1/+6
| | | | | | to 0 before using it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7192 dc483132-0cff-0310-8789-dd5450dbe970
* * adm_proto.h: Moved many string conversion functions to libkrb5Richard Basch1995-12-111-25/+0
| | | | | | for better support of multiple encryption type selection git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7191 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.hin: Moved string conversion functions from libkadmRichard Basch1995-12-111-0/+27
| | | | | | for better support of multiple encryption type selection git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7190 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.conf.M: describe new option default_tgs_enctypesRichard Basch1995-12-111-0/+5
| | | | | | for specifying the default session key types. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7189 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb5_edit.M: Document that modent existsEzra Peisach1995-12-103-0/+30
| | | | | | * kdb5_edit.c (modent): Add usage as suggested by jhawk@mit.edu. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7188 dc483132-0cff-0310-8789-dd5450dbe970
* Add new routine krb5_input_flag_to_string to allow an application toEzra Peisach1995-12-102-0/+16
| | | | | | | loop over the input flag strings for displaying help messages (i.e. modent in krb5_edit). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7187 dc483132-0cff-0310-8789-dd5450dbe970
* * adm_proto.h: Add prototype for krb5_input_flag_to_stringEzra Peisach1995-12-102-0/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7186 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5.conf Added example use of default_tgs_enctypesRichard Basch1995-12-061-0/+1
| | | | | | * krb5.conf.M Described new configuration option "default_tgs_enctypes" git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7179 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Use krb5util libraryEzra Peisach1995-12-063-1/+9
| | | | | | | * login.c (main): Change two-argument call to syslog to three arguments to handle screw cases in hostnames. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7178 dc483132-0cff-0310-8789-dd5450dbe970
* Move compat_recvauth to this library so that krb4 can depend on krb5Ezra Peisach1995-12-065-0/+392
| | | | | | (for configurable paths support). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7177 dc483132-0cff-0310-8789-dd5450dbe970
* Commit the removal or compat_recv.oEzra Peisach1995-12-061-302/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7176 dc483132-0cff-0310-8789-dd5450dbe970
* Move compat_recv.c to krb5utilEzra Peisach1995-12-062-2/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7175 dc483132-0cff-0310-8789-dd5450dbe970
* Removed krb4 dependency in building shared libraryEzra Peisach1995-12-062-9/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7174 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Shared library depends on krb5 library nowEzra Peisach1995-12-063-3/+15
| | | | | | * configure.in: Pass krb5 library version number to Makefile. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7173 dc483132-0cff-0310-8789-dd5450dbe970
* krb5 is built before krb4. Add krb5util libraryEzra Peisach1995-12-062-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7172 dc483132-0cff-0310-8789-dd5450dbe970
* Add USE_KRB5UTIL_LIBRARY. Change library link order to -lkrb4 -lkrb5Ezra Peisach1995-12-062-3/+16
| | | | | | | compat_recvauth is moving to a new library and krb4 now depends on krb5 anyways for the configurable path support. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7171 dc483132-0cff-0310-8789-dd5450dbe970
* Added support for matching against a supported app. session key typeRichard Basch1995-12-053-0/+81
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7170 dc483132-0cff-0310-8789-dd5450dbe970
* When searching for cached credentials, make sure we are also looking forRichard Basch1995-12-051-1/+1
| | | | | | credentials that are matching a supported application keytype. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7169 dc483132-0cff-0310-8789-dd5450dbe970
* Added two new routines for multiple encryption type support:Richard Basch1995-12-051-13/+131
| | | | | | | | | | | | krb5_set_default_tgs_ktypes(context, ktypes) This routine sets the default application session key types to be used. krb5_get_tgs_ktypes(context, principal, &ktypes) This routine gets the session key types to be used with "principal". At the moment, this only uses the krb5_set_default_tgs_ktypes values or those specified in libdefaults/default_tgs_enctypes (krb5.conf). It is envisioned that this may later support per-host/per-realm lookup. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7168 dc483132-0cff-0310-8789-dd5450dbe970
* Added prototypes for two new routines:Richard Basch1995-12-051-0/+9
| | | | | | | | krb5_set_default_tgs_ktypes - sets default app. session key types. krb5_get_tgs_ktypes - gets app. session key types. Also added a new flag for testing credential matches (match supported keytype) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7167 dc483132-0cff-0310-8789-dd5450dbe970
* Serialize / de-serialize the context structure, which now includes bothRichard Basch1995-12-051-15/+49
| | | | | | TGT session key types and application session key types. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7166 dc483132-0cff-0310-8789-dd5450dbe970
* Instead of using the TGT session key type, use the application sessionRichard Basch1995-12-051-1/+1
| | | | | | key type. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7165 dc483132-0cff-0310-8789-dd5450dbe970
* Extended the context structure to support differing tgt and applicationRichard Basch1995-12-051-2/+4
| | | | | | session keys. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7164 dc483132-0cff-0310-8789-dd5450dbe970
* The BSD application suite only understands using 1-DES as a session key typeRichard Basch1995-12-051-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7163 dc483132-0cff-0310-8789-dd5450dbe970
* Use symbolic names for the encryption types.Richard Basch1995-12-051-3/+6
| | | | | | Support 3-DES, too. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7162 dc483132-0cff-0310-8789-dd5450dbe970
* The wrong encryption system was being initialized. The response to the mk_reqRichard Basch1995-12-051-2/+2
| | | | | | | should be done using the session key and its encryption system, not the ticket's encryption system. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7161 dc483132-0cff-0310-8789-dd5450dbe970
* There is no longer a dependency on libkadmRichard Basch1995-12-053-3/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7160 dc483132-0cff-0310-8789-dd5450dbe970
* Moved most string-type conversion routines from libkadm to libkrb5 toRichard Basch1995-12-053-618/+670
| | | | | | | reduce the dependencies on libkadm and for better support of multiple encryption type lookup in krb5.conf. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7159 dc483132-0cff-0310-8789-dd5450dbe970
* Moved most string-type conversion routines from libkadm to libkrb5 toRichard Basch1995-12-052-1/+2
| | | | | | | reduce the dependencies on libkadm and for better support of multiple encryption type lookup in krb5.conf. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7158 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed the description of the algorithm in the commentRichard Basch1995-12-021-2/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7157 dc483132-0cff-0310-8789-dd5450dbe970
* XOR the last byte of weak keys with 0xf0, according to specRichard Basch1995-12-022-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7156 dc483132-0cff-0310-8789-dd5450dbe970
* Applied patch from Scott Schwartz <schwartz@galapagos.cse.psu.edu>Theodore Tso1995-12-012-0/+67
| | | | | | | | | | | | | | | | | | | | | | Under SunOS, and maybe other systems, there is a a problem with krlogind.c and a similar problem with login.c as distributed with K5.5. The bug is that rlogind forks a child but retains a controlling tty. If the child is in the same process group as the parent, which is will if you don't use a job control shell (chsh /bin/rc), keyboard signals will kill the daemon. telnetd dissociates itself properly, but then login.krb5 waits for the shell to finish, but login.krb5 has the same ctty as the shell and is in the same process group, so it has the same problem. In BSD you used to be able to give up your ctty at will, but SunOS seems to have setsid as the only mechanism to perform that action, and setsid can only succeed in limited circumstances. Rlogind ought to be fixed to behave more like telnetd, but independent of that, login.krb5 needs to be patched if kerberos is to work properly under SunOS. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7154 dc483132-0cff-0310-8789-dd5450dbe970
* Add rule for building shared object filesTheodore Tso1995-12-012-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7153 dc483132-0cff-0310-8789-dd5450dbe970
* Added Changelog fileTheodore Tso1995-12-011-0/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7152 dc483132-0cff-0310-8789-dd5450dbe970
* Added temporary definition of KRB5_ADM_M_EXTRADATA so that we have aTheodore Tso1995-12-012-0/+8
| | | | | | tree which (mostly) compiles. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7151 dc483132-0cff-0310-8789-dd5450dbe970
* In case of permission problems, don't unlink the old replay cache;Theodore Tso1995-12-012-1/+9
| | | | | | | make it a hard (repeatable) error. This also reduces the chance we accidentally delete valuable data. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7150 dc483132-0cff-0310-8789-dd5450dbe970
* Initialize rcache to zero, so that on cleanup we don't try to freeTheodore Tso1995-12-012-5/+6
| | | | | | stack garbage. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7149 dc483132-0cff-0310-8789-dd5450dbe970