| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |
|
|
|
|
|
| |
the entire key. The second 3-DES CBC encryption of the block
should use an ivec of the last cipher block.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7208 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7205 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
Todo: Create a real krb5_db_context after 1.0
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7204 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
resolve but these are sufficient to remove the ugly hack where the key is
passed to krb5_rd_req() in the user-to-user field of the auth_context.
These functions do NOT need to be built on the Macintosh or Windows systems.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7203 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7202 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
* kdb_dbm.c krb5_dbm_db_set_mkey(), krb5_dbm_db_get_mkey():
Functions for associating a master key (krb5_encrypt_block *)
to a krb5_db_context. Currently it associates it to the
krb5_context and will be fixed once the krb5_db_context
is better defined (Post 1.0).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7201 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
| |
should be associated with a krb5_db_context which will
make having a krb5_context unnecessary in the realm context.
* kdc_util.c kdc_process_tgs_req(): Use the realm keytab instead
of faking up a user-to-user key to pass to krb5_rd_req_decode().
* main.c: Added code to use the new database keytab routines.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7200 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
| |
KRB5_ADM_KW_UNSETFLAGS because relative flag modification
is just a good idea.
* kdb.h: typedef kdb5_dispatch_table so prototypes that need it
compile even if KDB5_DISPATCH isn't defined.
* kdb_dbc.h: The start of the database context, which should be
removed from the krb5_context.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7199 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
is specified (set the keyblock enctype to NULL).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7198 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
is specified (set the keyblock enctype to NULL).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7197 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
NULL, simply read in the enctype from the stash file and
don't try to check it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7196 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7195 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
folded result twice in the folded key. [Courtesy Uri Blumenthal]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7194 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
to 0 before using it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7192 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
for better support of multiple encryption type selection
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7191 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
for better support of multiple encryption type selection
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7190 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
for specifying the default session key types.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7189 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* kdb5_edit.c (modent): Add usage as suggested by jhawk@mit.edu.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7188 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
loop over the input flag strings for displaying help messages (i.e.
modent in krb5_edit).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7187 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7186 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* krb5.conf.M Described new configuration option "default_tgs_enctypes"
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7179 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
* login.c (main): Change two-argument call to syslog to three
arguments to handle screw cases in hostnames.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7178 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
(for configurable paths support).
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7177 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7176 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7175 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7174 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
* configure.in: Pass krb5 library version number to Makefile.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7173 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7172 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
compat_recvauth is moving to a new library and krb4 now depends on krb5
anyways for the configurable path support.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7171 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7170 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
credentials that are matching a supported application keytype.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7169 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
| |
krb5_set_default_tgs_ktypes(context, ktypes)
This routine sets the default application session key types to be used.
krb5_get_tgs_ktypes(context, principal, &ktypes)
This routine gets the session key types to be used with "principal".
At the moment, this only uses the krb5_set_default_tgs_ktypes values
or those specified in libdefaults/default_tgs_enctypes (krb5.conf).
It is envisioned that this may later support per-host/per-realm lookup.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7168 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
| |
krb5_set_default_tgs_ktypes - sets default app. session key types.
krb5_get_tgs_ktypes - gets app. session key types.
Also added a new flag for testing credential matches (match supported keytype)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7167 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
TGT session key types and application session key types.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7166 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
key type.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7165 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
session keys.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7164 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7163 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
Support 3-DES, too.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7162 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
should be done using the session key and its encryption system, not the
ticket's encryption system.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7161 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7160 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
reduce the dependencies on libkadm and for better support of multiple
encryption type lookup in krb5.conf.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7159 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
reduce the dependencies on libkadm and for better support of multiple
encryption type lookup in krb5.conf.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7158 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7157 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7156 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Under SunOS, and maybe other systems, there is a a problem with
krlogind.c and a similar problem with login.c as distributed with
K5.5.
The bug is that rlogind forks a child but retains a controlling tty.
If the child is in the same process group as the parent, which is will
if you don't use a job control shell (chsh /bin/rc), keyboard signals
will kill the daemon. telnetd dissociates itself properly, but then
login.krb5 waits for the shell to finish, but login.krb5 has the same
ctty as the shell and is in the same process group, so it has the same
problem.
In BSD you used to be able to give up your ctty at will, but SunOS
seems to have setsid as the only mechanism to perform that action, and
setsid can only succeed in limited circumstances. Rlogind ought to be
fixed to behave more like telnetd, but independent of that, login.krb5
needs to be patched if kerberos is to work properly under SunOS.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7154 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7153 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7152 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
tree which (mostly) compiles.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7151 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
|
| |
make it a hard (repeatable) error. This also reduces the chance we
accidentally delete valuable data.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7150 dc483132-0cff-0310-8789-dd5450dbe970
|
| |
|
|
|
|
| |
stack garbage.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7149 dc483132-0cff-0310-8789-dd5450dbe970
|