summaryrefslogtreecommitdiff
path: root/source3/librpc/crypto
AgeCommit message (Collapse)AuthorFilesLines
2011-05-05Fix many const compiler warnings.Jeremy Allison1-21/+23
2011-04-27s3-rpc_server Fix compile without kerberosAndrew Bartlett1-1/+2
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Apr 27 23:08:48 CEST 2011 on sn-devel-104
2011-04-27s3-gse: Don't release the mech OID from gss_accept_security_contextAndrew Bartlett1-4/+31
This is constant data according to the man pages I find for this fucntion, and causes a segfault to free() when linked to Heimdal. I am advised that while it is constant for gss_mech_krb5, it may not be for other mechanisms, so an assert will ensure this is dealt with by the programmer who extends this code in future. Andrew Bartlett
2011-04-27auth/kerberos: Create common helper to get the verified PAC from GSSAPIAndrew Bartlett2-43/+7
This only works for Heimdal and MIT Krb5 1.8, other versions will get an ACCESS_DEINED error. We no longer manually verify any details of the PAC in Samba for GSSAPI logins, as we never had the information to do it properly, and it is better to have the GSSAPI library handle it. Andrew Bartlett
2011-04-20s3-gse: Allow the GSSAPI wrapper to load a keytab using gss_krb5_import_cred()Andrew Bartlett2-22/+29
This Heimdal function does not set the global state, and allows the GSSAPI server to progress further when compiled against Heimdal (such as in the top level build). The ability to specify a keytab has been removed from the API as it is unused, and and the Heimdal function (avoiding setting global variables) works with an open keytab. Andrew Bartlett
2011-04-16s3-gse Allow GSSAPI wrapper to compile against HeimdalAndrew Bartlett1-1/+3
2011-04-06s3-librpc Fix creation of in-memory keytab for previous passwordAndrew Bartlett1-1/+1
We set the current password twice, rather than the current and old password. Andrew Bartlett
2010-09-23s3-dcerpc: add spnego server helpersSimo Sorce2-1/+110
squashed: add michlistMIC signature checks Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23spnego: make spnego_context publicSimo Sorce2-21/+19
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23s3-dcerpc: move client spnego stuff in /librpc/cryptoSimo Sorce2-0/+430
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23gssapi: remove unused function argumentSimo Sorce2-3/+0
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23gssapi: avoid explicit dependency on dcerpc specific structuresSimo Sorce2-37/+12
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23s3-dcerpc: move crypto stuff in /librpc/cryptoSimo Sorce4-0/+1529
Signed-off-by: Günther Deschner <gd@samba.org>