added a ASN.1 parser, so now I can properly parse the negTokenInit

packet which means I can extract the service and realm, so we should
now work with realms other than the local realm.

it also means we now check the list of OIDs given by the server just
in case it says that it doesn't support kerberos. In that case we
should fall back to NTLMSSP but that isn't written yet.
(This used to be commit 395cfeea94febb5280ea57027e8a8a3c7c3f9291)

1 files changed, 4 insertions, 0 deletions

diff --git a/source3/include/asn1.h b/source3/include/asn1.h
index f09c7ebbc1..183a9ced6c 100644
--- a/source3/include/asn1.h
+++ b/source3/include/asn1.h
@@ -22,6 +22,7 @@
 
 struct nesting {
 	off_t start;
+	size_t taglen; /* for parsing */
 	struct nesting *next;
 };
 
@@ -30,6 +31,7 @@ typedef struct {
 	size_t length;
 	off_t ofs;
 	struct nesting *nesting;
+	BOOL has_error;
 } ASN1_DATA;
 
 
@@ -40,3 +42,5 @@ typedef struct {
 #define ASN1_OCTET_STRING 0x4
 #define ASN1_OID 0x6
 #define ASN1_BOOLEAN 0x1
+
+#define ASN1_MAX_OIDS 20