1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00

59 Commits

Author SHA1 Message Date
Simo Sorce
38a5a2c5c5 Move kerberos_kinit_keyblock_cc to krb5samba lib
Make it also work with MIT where krb5_get_in_tkt_with_keyblock is not
available.
2012-05-04 16:51:28 +02:00
Alexander Bokovoy
594e316181 lib/replace: split out GSSAPI from lib/replace/system/kerberos.h into lib/replace/system/gssapi.h
With waf build include directories are defined by dependencies specified to subsystems.
Without proper dependency <gssapi/gssapi.h> cannot be found for embedded Heimdal builds
when there are no system-wide gssapi/gssapi.h available.

Split out GSSAPI header includes in a separate replacement header and use that explicitly
where needed.

Autobuild-User: Alexander Bokovoy <ab@samba.org>
Autobuild-Date: Wed Apr 25 00:18:33 CEST 2012 on sn-devel-104
2012-04-25 00:18:32 +02:00
Alexander Bokovoy
090f9072da Make sure krb5_principal_get_num_comp is identified as present for Heimdal build
Common wrappers for MIT / Heimdal use krb5_principal_get_num_comp() to replace krb5_princ_size
but rely on krb5_principal_get_num_comp() identified by the build. As we know it exists in Heimdal,
define it for waf build.

Signed-off-by: Simo Sorce <idra@samba.org>
2012-04-23 16:39:59 -04:00
Alexander Bokovoy
5cae9293d1 waf: rename SAMBA4_INTERNAL_HEIMDAL to SAMBA4_USES_HEIMDAL
SAMBA4_INTERNAL_HEIMDAL is defined unconditionally regardless
where Heimdal comes from, system-wide or embedded version.

This define is not used anywhere. We'll use it to distinguish
between Heimdal and MIT Krb5 builds.

Signed-off-by: Simo Sorce <idra@samba.org>
2012-04-23 16:38:44 -04:00
Andrew Bartlett
fba028afbd build: Remove checks for krb5_decode_ap_req, free_AP_REQ and KRB5_TICKET_HAS_KEYINFO
Signed-off-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Apr  3 19:19:33 CEST 2012 on sn-devel-104
2012-04-03 19:19:33 +02:00
Andrew Bartlett
3bf922111a s3-build: expliticly require gssapi for HAVE_KRB5 and remove HAVE_GSSAPI
The requirement for gss functions already make this happen, but
this is clearer.  No code depends on HAVE_GSSAPI any more.

Andrew Bartlett
2012-02-13 04:41:05 +01:00
Andrew Bartlett
5c2a2135c9 s3-libsmb: Remove unused kerberos_set_creds_enctype()
Also remove the unused configure tests for krb5_c_enctype_compare.

Found by callcatcher: http://www.skynet.ie/~caolan/Packages/callcatcher.html

Andrew Bartlett
2012-02-10 16:45:15 +11:00
Andrew Bartlett
292974ed0c s3-libsmb: Remove unused kerberos_compatible_enctypes
Also remove the unused configure tests for krb5_c_enctype_compare.

Found by callcatcher: http://www.skynet.ie/~caolan/Packages/callcatcher.html

Andrew Bartlett
2012-02-10 16:45:14 +11:00
Stefan Metzmacher
c74a522db1 s3:build: require gss_krb5_export_lucid_sec_context() for ads support
This is needed to detect krb5 with aes for GENSEC_FEATURE_NEW_SPNEGO
at runtime.

metze
2012-01-25 08:44:33 +01:00
Andrew Bartlett
39d73e2420 krb5: Require krb5_get_renewed_creds be available to build with krb5 2012-01-10 21:50:07 +01:00
Andrew Bartlett
a33d86a745 krb5: Remove now unused checks for krb5_verify_checksum 2012-01-10 21:50:07 +01:00
Andrew Bartlett
17e61e4290 krb5: Require krb5_c_enctype_compare is available to build with krb5 2012-01-10 21:50:07 +01:00
Günther Deschner
0f7918425a samba: check for AES encryption type defines.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Tue Jan 10 15:05:38 CET 2012 on sn-devel-104
2012-01-10 15:05:37 +01:00
Andrew Bartlett
25d7675d69 s3-librpc Use gsskrb5_get_subkey() where available to get the session key
This allows gse_get_session_key() to work against Heimdal.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05 17:17:28 +01:00
Jelmer Vernooij
56e86ed52d heimdal_build: Use krb5-config to find heimdal include directory and library path, rather than hardcoding. 2011-08-01 17:48:30 +02:00
Stefan Metzmacher
dcf197fc8c s4:heimdal_build: define HAVE_KRB5_PDU_NONE_DECL
metze
2011-07-15 11:15:05 +02:00
Andrew Bartlett
e1eae82285 kerberos: Only include gssapi/gssapi_krb5.h when available 2011-04-30 04:58:04 +02:00
Andrew Bartlett
47e2870228 auth/kerberos Add check for gss_inquire_sec_context_by_oid
Not all kerberos distributions have this function.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed Apr 27 07:39:08 CEST 2011 on sn-devel-104
2011-04-27 07:39:08 +02:00
Andrew Bartlett
cd7112ba84 s3-gse: Don't release the mech OID from gss_accept_security_context
This is constant data according to the man pages I find for this
fucntion, and causes a segfault to free() when linked to Heimdal.  I
am advised that while it is constant for gss_mech_krb5, it may not be
for other mechanisms, so an assert will ensure this is dealt with by
the programmer who extends this code in future.

Andrew Bartlett
2011-04-27 11:56:48 +10:00
Jelmer Vernooij
67fd0cd62e Add check for krb5_free_unparsed_name, when using external heimdal. 2011-04-23 15:46:18 +02:00
Andrew Bartlett
ee4a7b3530 s4-heimdal_build: Add extra HAVE defines needed for the source3 krb5 code 2011-04-16 11:43:05 +02:00
Andrew Bartlett
4ba1375526 libcli/auth Move krb5 wrapper functions from s3 into common
This requires a small rework of the build system to ensure that the
correct #define statements are made in both the s3 and top level
builds.  We now define the various HAVE_ macros in config.h at all
times, using heimdal_build/wscript_configure when that is in use.

Andrew Bartlett
2011-04-14 16:38:26 +10:00
Jelmer Vernooij
d93fd5f06b heimdal_build: Support using system gssapi library. 2011-01-01 04:00:04 +01:00
Jelmer Vernooij
6a669c7454 heimdal_build: Support using system hdb and kdc libraries. 2011-01-01 04:00:03 +01:00
Jelmer Vernooij
91fc7a2ddc heimdal_build: Allow using system krb5. 2011-01-01 04:00:03 +01:00
Jelmer Vernooij
4ea992428b heimdal_build: Allow using system heimntlm. 2011-01-01 04:00:03 +01:00
Jelmer Vernooij
3febaed9ba heimdal_build: Look for asn1_compile (but by default, don't use it). 2011-01-01 04:00:03 +01:00
Jelmer Vernooij
21b918e618 heimdal_build: Allow using system hbase and hcrypto. 2010-12-22 01:38:06 +01:00
Jelmer Vernooij
b2af44e92b heimdal_build: Fix detection of system roken library. 2010-10-16 17:33:17 +02:00
Jelmer Vernooij
50d3baffb2 heimdal_build: Support using system asn1 library.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Oct 16 02:14:32 UTC 2010 on sn-devel-104
2010-10-16 02:14:32 +00:00
Jelmer Vernooij
8db6453ae2 heimdal_build: Add comment with stub for finding the system libtommath. 2010-10-16 01:32:06 +00:00
Jelmer Vernooij
471e57edf8 heimdal_build: Support using system hx509 library when explicitly
requested.
2010-10-16 01:32:06 +00:00
Jelmer Vernooij
6852cc4a7a heimdal_build: Put version objects in a separate subsystem. 2010-10-16 01:32:06 +00:00
Jelmer Vernooij
2e038a78fd heimdal: Support using system roken. 2010-10-16 01:32:06 +00:00
Jelmer Vernooij
7af5687504 heimdal_build: Use existing functions for finding system libraries. 2010-10-16 01:32:05 +00:00
Jelmer Vernooij
613e03f908 heimdal_build: Allow using system wind.
Please note that to use the system wind library the user explicitly has
to specify --bundled-library=!wind . Without that option we will always
use the included wind library.
2010-10-15 22:38:07 +00:00
Andrew Tridgell
58c1d0c256 s4-heimdal: disable using the system compile_et for now
just checking that compile_et exists isn't enough. It has to actually
work. Quite a few build farm systems have /usr/bin/compile_et, but it
gets link errors when you try to use it (missing symbols et_list_lock
and et_list_unlock)

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Oct  6 07:48:16 UTC 2010 on sn-devel-104
2010-10-06 07:48:16 +00:00
Jelmer Vernooij
46b4fe0c48 heimdal-build: Require com_err library to provide com_right_r function. 2010-10-05 23:56:44 +02:00
Kamen Mazdrashki
95c6c9b69b heimdal-com_err: fix the build for systems with older 'com_err' library
Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Tue Oct  5 21:36:41 UTC 2010 on sn-devel-104
2010-10-05 21:36:41 +00:00
Jelmer Vernooij
c676c950db compile_et: Support using system compile_et. 2010-10-04 15:23:24 +02:00
Jelmer Vernooij
0bda3f8cfb heimdal: Support using system com_err. 2010-10-04 14:13:24 +02:00
Jelmer Vernooij
c5d07d2a1a Per Andrews request, revert
"heimdal/waf: Initial work on making it possible to use the system"
as the hdb_check_s4u2self function handling is incorrect.

This reverts commit b099631f428d0ecc641d59bd3c94674e6348dde9.
2010-06-23 14:49:02 +02:00
Jelmer Vernooij
b099631f42 heimdal/waf: Initial work on making it possible to use the system
heimdal again.

Still missing are the detection of the right Heimdal version and
linking (unresolved symbols at the moment).
2010-06-19 15:32:27 +02:00
Andrew Tridgell
20a8574717 s4-waf: look in libintl for dgettext() 2010-04-06 20:27:18 +10:00
Andrew Tridgell
5d84194644 s4-waf: heimdal wants to look for dd_fd in DIR 2010-04-06 20:27:14 +10:00
Andrew Tridgell
f9eae32f4b s4-waf: mark the wscript files as python so vim/emacs knows how to highlight them 2010-04-06 20:27:11 +10:00
Andrew Tridgell
9730166fd6 build: configure fixes for opensolaris 2010-04-06 20:27:01 +10:00
Andrew Tridgell
00649a9c62 build: updated configure checks or new syntax 2010-04-06 20:27:00 +10:00
Andrew Tridgell
3207f81787 build: more functions that are in -lsocket -lnsl on some systems 2010-04-06 20:26:57 +10:00
Andrew Tridgell
702615dadc build: don't look for gettext twice 2010-04-06 20:26:56 +10:00