Age | Commit message (Collapse) | Author | Files | Lines |
|
- use the client_site when creating the server object
metze
(This used to be commit b02d0e1be343c7d609715237dc842702b6fbe231)
|
|
metze
(This used to be commit fa439f5655654b044eabb4657989d476aa9f5ea9)
|
|
this also let wireshark match the responses
metze
(This used to be commit 9e52b0b9b59e2c8ee7b1242a191cc37e462842c1)
|
|
(This used to be commit 7b9b2e5358030aed5cb69dbc93d3175c9cac4455)
|
|
Andrew Bartlett
(This used to be commit 1c3e9b27a793971b096192204c54338b5e571521)
|
|
Andrew Bartlett
(This used to be commit 4c349f44f8a018e1ad6ed8e92c5083abc4979324)
|
|
lookup plugin, the new PAC validation code as well as Heimdal's SPNEGO
implementation.
Andrew Bartlett
(This used to be commit 05421f45ed7811697ea491e26c9d991a7faa1a64)
|
|
Create temporary directories in base directory.
(This used to be commit f111feb1d2b82a9ec3a8b6fbcdbe297bf11edc42)
|
|
(This used to be commit ff9e1b4f0634847d0db178b2c283865c4fb39c9b)
|
|
(This used to be commit 0953bb7d5f2f2a81688f5421e1fbfa3bc38aa810)
|
|
(This used to be commit 17c2557834aad8c85fb640054c942f99bbce1d94)
|
|
(This used to be commit 8768bec81f57131a0c9754e8121b345c0be4a5d0)
|
|
and only have private depdendencies
metze
(This used to be commit f37c9f4d920c1a2dc160ce1c26cf70fbb45c653f)
|
|
metze
(This used to be commit 30963753fcd9d8db17ca5c8476cc85b7084b7e87)
|
|
(This used to be commit dad9156db9d53c51d7785139576dddcde7e34c56)
|
|
interdependencies
with LIBSAMBA-CONFIG.
(This used to be commit 4a044fb529075044755a0b5cc21446bf24bec72e)
|
|
Fix starting tests in shared library build.
(This used to be commit 3b65a0d6e491a57ed216dc0cd9c31d46e0cb6a35)
|
|
libraries.
(This used to be commit 4422031d1d9307539832cee165c5071ff12943e7)
|
|
should _krb5_find_type_in_ad() also take a const?
metze
(This used to be commit addc31bd9309cb2b41cbb548c82c80de1cf96c4f)
|
|
support for netbios domain based realms
metze
(This used to be commit dcec6eebf1b474ae3055449efebf491b1106a458)
|
|
when the client is using the netbios domain name as realm.
we should match this and not rewrite the principal.
This matches what windows give:
metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./kinit administrator@SERNOXDOM4
administrator@SERNOXDOM4's Password:
metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./klist
Credentials cache: FILE:/tmp/krb5cc_10000
Principal: administrator@SERNOXDOM4.MX.BASE
Issued Expires Principal
Nov 11 13:37:52 Nov 11 23:37:52 krbtgt/SERNOXDOM4@SERNOXDOM4.MX.BASE
Note:
I need to disable the principal checks in heimdal's
_krb5_extract_ticket() for the kinit to work.
Any ideas how to change heimdal to support this.
For the service principal we should use
the realm and principal in req->kdc_rep.enc_part
instead of the unencrypted req->kdc.ticket.sname
and req->kdc.ticket.realm to have a trusted value.
I'm not sure what we can do with the client realm...
metze
(This used to be commit cfee02143f06ed6ff5832e95fa69634f5dd883da)
|
|
- remove ipv6 support untill the resolve layer can give ipv6 addresses
metze
(This used to be commit 1e518c3e675e6952044bc0fdf2537be432c0c56f)
|
|
valrind issues on fort, because we won't hit NSS any more.
Andrew Bartlett
(This used to be commit 6f67fa01ab4f946c9a9aae0d4e8d028153873e04)
|
|
negotiate krb5, but if this works, I'll add NTLM as a GSSAPI backend
by some means or other.
Andrew Bartlett
(This used to be commit 476452e143f61a3878a3646864729daaddccdf68)
|
|
Andrew Bartlett
(This used to be commit ffce0087759d45a8dff8647feffa3bedbf42023b)
|
|
metze
(This used to be commit 643a38bc30a0df1582035b8d264e0dbbc2d2e152)
|
|
gsskrb5_set_default_realm(), which should fix mimir's issues.
Andrew Bartlett
(This used to be commit 8117e76d2adee163925a29df872015ff5021a1d3)
|
|
metze
(This used to be commit f02f7ed19db2be8e23b1a5850082c9f9da35c028)
|
|
metze
(This used to be commit a5d36a6ddefb8c24e748b839391241da41e31440)
|
|
to the ildap backend
metze
(This used to be commit a996d2633600d32b2c2c04edebd0b901c627f00b)
|
|
rafal
(This used to be commit 1ea37bf3b32a7f534b3ae1918fc6336ef062f8ab)
|
|
metze
(This used to be commit 800999733eb2f35486a62fb8fa9d179c8ca312fa)
|
|
metze
(This used to be commit 617f9c70c1b61e0fd4338048bbd94e7a4722ad9d)
|
|
rafal
(This used to be commit 73e3f7efa71ca07a42215b044cd9a20762cf2694)
|
|
Always build and install .pc files as they make sense for static libs
as well.
(This used to be commit 82cb91e2dd50899050066cccee82cb5be52ec3fe)
|
|
(or something like that).
In any case, we need to stick with the initiator subkey for now, until
we figure out what Vista uses for the CIFS session key.
Andrew Bartlett
(This used to be commit b91a921e1393581ca0102ad1f49a1075acb91b4e)
|
|
(This used to be commit e8f2a086be2a0553467738df711b1450ba559848)
|
|
favour of a more tasteful replacement.
Remove kerberos_verify.c, as we don't need that code any more.
Replace with code for using the new krb5_rd_req_ctx() borrowed from
Heimdal's accecpt_sec_context.c
Andrew Bartlett
(This used to be commit 13c9df1d4f0517468c80040d3756310d4dcbdd50)
|
|
full database name. The existing code (needed for when we use the HDB
as a keytab, such as for the kpasswd service) only works for HDB
keytabs not prefixed with a type.
Andrew Bartlett
(This used to be commit 12dc157daea4a20200f910d8e71c49670e35ef50)
|
|
shared libraries are actually used.
(This used to be commit 93e4f093b946cbb1b6deca82efdf0d5f033128b8)
|
|
Useful when testing calls against windows servers with krb auth.
rafal
(This used to be commit 0725e2ddebde9c170340d0284a1573222caa2159)
|
|
Andrew Bartlett
(This used to be commit 247b9f1ca907cf921087e6840400ddf68289b8f2)
|
|
Larry told me that most context flags needed to be set to, otherwise
it wouldn't work.
This fixes DCE_STYLE against Win2k3 SP1. It seems they just tightened
up their end of the GSSAPI code, as DCE_STYLE is explicity rejected in
the session setup too (being the wrong layer).
Andrew Bartlett
(This used to be commit b2b77f34a4d0cebb828cac7bf9a73826fecab5b6)
|
|
configure checks
and working shared libraries
metze
(This used to be commit 25376f748c6f2da48a8bf7e0aa0d59befb9db4f3)
|
|
metze
(This used to be commit b6d1fd1b24d09049fcd432a804ad905e89fcc224)
|
|
they all have unresolved symbols and are useless
and produce noise in the build-farm
metze
(This used to be commit 3f8b776f630488aaec9f0ffcc099b01dcab02f3f)
|
|
- fix default for enable-dso to no
metze
(This used to be commit 47b113e5dbd33ab91246029af9293809824c5395)
|
|
generate more output
metze
(This used to be commit a07b11924c16d51cda484d417d9e1201278b03cb)
|
|
(This used to be commit 3bec179de6208d396b65a2cbe98efcbd7d99e242)
|
|
packaging repository.
(This used to be commit 75162a873c7116eb0b0c8b70c8d335e5069e51be)
|