aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-09-20gss_export_name_composite support for mechanisms that don'tlhoward/namingexts-mechglueLuke Howard13-159/+339
implement it git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/namingexts-mechglue@24334 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-20GSS_C_NT_COMPOSITE_EXPORT supportLuke Howard6-2/+23
git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/namingexts-mechglue@24333 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-20Add naming extensions support to sample server, MoonshotLuke Howard2-1/+95
to client git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/namingexts-mechglue@24332 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-19prototype (untested) codeLuke Howard9-11/+663
git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/namingexts-mechglue@24331 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-19Creating a branch for prototype gss_export_name_compositeLuke Howard0-0/+0
implementation residing in mechglue git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/namingexts-mechglue@24330 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-19Slight revisions to create_workers() in the KDC:Greg Hudson1-6/+9
* Use calloc() to allocate the pids array; squashes a Coverity false positive. * Don't leak the pids array in worker processes. * Use consistent terminology in comments. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24329 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-17KDC worker processes featureGreg Hudson7-13/+168
Add support for a krb5kdc -w option which causes the KDC to spawn worker processes which can process requests in parallel. See also: http://k5wiki.kerberos.org/wiki/Projects/Parallel_KDC ticket: 6783 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24328 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-17Add an extra arguments parameter to k5test's realm.start_kdc()Greg Hudson1-4/+5
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24327 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-17In kinit_kdb_init(), ensure that we don't return an error with theGreg Hudson1-1/+3
old, freed value of *pcontext still there--that would result in a double free. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24326 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-16Follow-on to r24315: remove get/set_mkey_list from export list ofGreg Hudson1-2/+0
libkdb_ldap. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24324 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15In the PKINIT OpenSSL crypto code, use a signed int to hold the resultGreg Hudson1-3/+3
of X509_get_ext_by_NID so we can detect negative return values. Reported by nalin@redhat.com. ticket: 6774 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24323 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15WhitespaceGreg Hudson3-25/+29
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24322 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15Add a license statement to the new extern.h in kinit, use an includeGreg Hudson1-6/+35
blocker which does not impinge on the system's symbol namespace, and use the recommended formatting for function prototypes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24319 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15WhitespaceGreg Hudson1-26/+29
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24318 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15Formatting fixGreg Hudson1-2/+2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24317 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15kinit: add KDB keytab supportSam Hartman6-6/+103
This implements http://k5wiki.kerberos.org/Projects/What_does_God_need_with_a_password. If the KDB keytab is selected by command line options, then kinit will register the KDB keytab and open the database. This permits an administrator to obtain tickets as a user without knowing that user's password. As a result kinit links against libkadm5srv and libkdb5. Discussion is ongoing about whether this is desirable or about whether two versions of kinit are required. ticket: 6779 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24316 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15Remove dead code from DAL and kdb pluginsSam Hartman9-143/+0
kdb: remove get/set_mkey_list git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24315 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15kdb: store mkey list in context and permit NULL mkey for ↵Sam Hartman13-250/+114
kdb_dbe_decrypt_key_data Previously, code needed to run a loop to find the current master key, possibly fetch a new master key list and try finding the master key again around each key decryption. This was not universally done; there are cases where only the current master key was used. In addition, the correct ideom for decrypting key data is too complicated and is potentially unavailable to plugins that do not have access to the master key. Instead, store the master key list in the dal_handle whenever it is fetched and permit a NULL master key for krb5_dbe_decrypt_key_data. * Remove APIs for krb5_db_{get|set}_mkey_list * krb5_db_fetch_mkey_list: memoize master key list in dal_handle * krb5_db_free_mkey_list: don't free the memoized list; arrange for it to be freed later * krb5_dbe_decrypt_key_data: Search for correct master key on NULL argument * change call sites to take advantage ticket: 6778 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24314 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15In the PKINIT OpenSSL code, ensure that appropriate cerficiate fieldsGreg Hudson1-0/+2
have been set before using ku_reject. Patch from nalin@redhat.com. ticket: 6775 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24313 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15Use correct CRL stack macros in pkinit OpenSSL code. Patch from OlafGreg Hudson1-3/+3
Flebbe. ticket: 6776 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24312 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15WhitespaceGreg Hudson1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24311 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15Fix warnings in encrypt_key and decrypt_key. Avoid a segfault if NULLSam Hartman2-6/+10
master key is passed into default decryption function. kdb: fix warnings git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24310 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-15In krb5_sname_to_principal, correctly handle failures fromGreg Hudson1-2/+2
krb5_build_principal. ticket: 6777 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24309 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-09Allow a zero checksum type to be passed into krb5_k_verify_checksum_iov;Luke Howard1-0/+6
this indicates that the mandatory checksum type for the key is to be used. This interface is necessary because there is no public interface through which the mandatory checksum type for an encryption type can be determined. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24304 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-09krb5_k_make_checksum will use the mandatory checksum type if 0 isLuke Howard1-0/+6
passed in as the checksum type; however krb5_k_make_checksum_iov does not support this. Add the same logic for the behaviour is consistent. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24303 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-08Add dummy camellia subdir to openssl back end makefileGreg Hudson1-1/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24299 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-08Make dependGreg Hudson55-1306/+1756
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24298 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-08Don't build the built-in Camellia block cipher code if Camellia-CCMGreg Hudson2-0/+10
enctypes aren't enabled. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24297 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-08X509_verify_cert can return without setting cert_ctx.current_cert. IfGreg Hudson1-2/+5
it does, don't dereference a null pointer when creating the pkiDebug message. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24296 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-07Merge the camellia-ccm branch to trunk. Since there are no IANAGreg Hudson63-333/+6298
assignments for Camellia-CCM enctypes or cksumtypes yet, they are disabled in a default build. They can be made available by defining (via CPPFLAGS) local-use enctype numbers for the enctypes and cksumtypes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24295 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-04Ensure valid key in krb5int_yarrow_cipher_encrypt_blockEzra Peisach1-0/+6
Under low memory conditions (or when testing memory allocation failures), the key pointer will be 0 - and not initialized. Test and return failure before deref a NULL. ticket: 6772 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24292 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-04Fix memory leaks in kdb5_verifyEzra Peisach1-0/+2
Minor leaks. Just cleaning up code. ticket: 6771 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24291 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-04In k5_pwqual_load(), if the last vtable initializer fails, return 0Greg Hudson1-0/+1
and not its exit value. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24290 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-03Fix output argument ordering and handling in k5_pwqual_load()Greg Hudson3-7/+9
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24289 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-03Prevent a double free in k5_pwqual_load()Greg Hudson1-0/+1
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24288 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-03clean up memory leak and potential unused variable in crypto testsEzra Peisach2-0/+5
t_prf.c: Ensure prfsz is set before use (not exercised in current tests) t_short.c: Fix memory leak ticket: 6769 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24287 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-02Properly search for MANDATORY-FOR-KDC authdata elements. Reported byGreg Hudson1-1/+1
Mike Roszkowski. ticket: 6764 tags: pullup target_version: 1.8.4 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24286 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-01Oops, pwqual_combo wasn't supposed to make it out of the plugins2Greg Hudson2-201/+0
branch. Delete it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24285 dc483132-0cff-0310-8789-dd5450dbe970
2010-09-01Password quality pluggable interfaceGreg Hudson23-369/+1254
Merge branches/plugins2 to trunk. Adds a password quality pluggable interface described in this project page: http://k5wiki.kerberos.org/wiki/Projects/Password_quality_pluggable_interface ticket: 6765 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24284 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-31Make the new profile tcl tests work with tcl 8.3Greg Hudson1-4/+4
ticket: 6761 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24282 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-30Make relative plugin module paths be interpreted as relative toGreg Hudson1-2/+35
LIBDIR/krb5/plugins. ticket: 6763 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24277 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-29Fix a resource leak in the profile include supportGreg Hudson1-5/+8
ticket: 6761 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24274 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-29Add simple automated tests for account lockout supportGreg Hudson2-0/+49
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24269 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-29Fix an account lockout error-handling regression by converting theGreg Hudson1-11/+23
result of krb5_db_check_policy_as/tgs from a krb5_error_code to a protocol error number. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24268 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-27Add plugin.o to T_ETYPES_OBJS because init_ctx.o needs it nowTom Yu1-1/+1
ticket: 6763 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24264 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-27New plugin infrastructureGreg Hudson8-0/+549
Merge domain-independent plugin framework code from branches/plugins2, leaving out the password quality interface. ticket: 6763 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24263 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-26Add an expansion error table for libkrb5, since krb5_err.et is fullGreg Hudson4-11/+55
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24258 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-25rd_req_decoded: clarify behavior in commentSam Hartman1-1/+8
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24257 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-25Revise the profile include design so that included files areGreg Hudson4-18/+57
syntactically independent of parent files. ticket: 6761 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24256 dc483132-0cff-0310-8789-dd5450dbe970
2010-08-24Correct a commentGreg Hudson1-2/+2
ticket: 6761 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24255 dc483132-0cff-0310-8789-dd5450dbe970
generated by cgit v1.1 at 2024-09-17 16:26:45 +0000