GitLab

This reverts commit 2b8b5252.

Additional fields may be added to this structure without us explicitly
initialising them. This could cause Heimdal to crash upon reading
garbage data, so we should zero-initialise the structure.
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>

The reply structure was not being zero-initialised in all cases, leading
to crashes or possible heap corruption on error paths when we later
freed it.
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>

Andrew Bartlett authored Dec 02, 2021 and Joseph Sutton committed Dec 08, 2021

This interface is as requested by Luke Howard towards possibly merging
this feature.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Dec 02, 2021 and Joseph Sutton committed Dec 08, 2021

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Dec 02, 2021 and Joseph Sutton committed Dec 08, 2021

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Nov 29, 2021 and Joseph Sutton committed Dec 08, 2021

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jun 17, 2021 and Joseph Sutton committed Dec 08, 2021

This matches Windows and is detected by our samba.tests.krb5.as_canonicalization_tests
test as this always expects the salt, which Windows always provides.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jul 07, 2021 and Joseph Sutton committed Dec 08, 2021

Only the .h output of compiling crmf.asn1 is needed.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jul 07, 2021 and Joseph Sutton committed Dec 08, 2021

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jun 18, 2021 and Joseph Sutton committed Dec 08, 2021

Heimdal matches Windows in this respect
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jun 17, 2021 and Joseph Sutton committed Dec 08, 2021

Heimdal moved canonicalization logic into the KDC, but we have the
carefully balanced logic in db-glue.c already, so keep that going.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Aug 26, 2021 and Joseph Sutton committed Dec 08, 2021

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Aug 26, 2021 and Joseph Sutton committed Dec 08, 2021

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jun 23, 2021 and Joseph Sutton committed Dec 08, 2021

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jun 23, 2021 and Joseph Sutton committed Dec 08, 2021

Modern Heimdal falls back to kdc_check_flags() internally
when KRB5_PLUGIN_NO_HANDLE is returned, avoiding the need
to call back into the internal KDC APIs.

Selected from patch by by Stefan Metzmacher <metze@samba.org>
from his Heimdal upgrade branch.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jun 23, 2021 and Joseph Sutton committed Dec 08, 2021

This is needed to give hdb_samba4 the full control over the returned
principal, rather than the new code in the Heimdal KDC.

Selected from code by Stefan Metzmacher <metze@samba.org>
in his Heimdal upgrade branch.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Aug 09, 2021 and Joseph Sutton committed Dec 08, 2021

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jun 30, 2021 and Joseph Sutton committed Dec 08, 2021

We do this by using the list from makefile.common in libtommath rather than trying
to match the list by hand.  This will be easier to maintain over the long term.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Andrew Bartlett authored Jun 30, 2021 and Joseph Sutton committed Dec 08, 2021

Signed-off-by: Andrew Bartlett <abartlet@samba.org>