samba.git/source4/heimdal/lib, branch talloc-2.3.3

heimdal_build: Use lib/asn1/rfc2459.opt rather than hard-coded

2021-06-15T23:25:27+00:00

Based on patch by Stefan Metzmacher in his Heimdal upgrade branch

lib/asn1/rfc2459.opt imported from
lorikeet-heimdal-abartlet/lorikeet-heimdal-201107241840-plus-recent-changes
which is the closest tree I could find, and matches the options being
removed from the wscript_build file.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Tue Jun 15 23:25:27 UTC 2021 on sn-devel-184

build: Use bison at build time rather than lexyacc.sh to build the embedded heimdal

2021-04-28T03:43:34+00:00

Because the filenames are changed to the *.tab.{h,c} format
a transitional header is added.

While the built compilers differ, the output of the compilers
and the resulting .o files have been verified not to have changed
on Ubuntu 20.04.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

heimdal: use correct prototype of yyparse()

2021-04-28T03:43:34+00:00

As noted in 92c6891c368cae5c2402727c1f66f1c60778199d in upstream
Heimdal yyparse() returns an int.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

HEIMDAL: Avoid yydebug compiler warning

2021-04-28T03:43:34+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall 
(cherry-picked from Heimdal commit 17d6d0ac1e8597e91d723399cbe9af9ea2e13f42)

HEIMDAL: krb5_storage_free(NULL) should work

2021-02-09T03:09:34+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12505

Signed-off-by: Paul Wise 
Reviewed-by: Jeremy Allison 
Reviewed-by: Andrew Bartlett 
Original-author: Nicolas Williams 
(cherry-picked from heimdal commit b3db07d5f0e03f6a1a0a392e70f9675e19a6d6af)

Compile .l files (flex) with the waf rule at runtime

2020-08-07T03:23:44+00:00

Other parts of Samba already compile these directly.

This makes these files compile with modern compiler warnings.

The primary difference (other than being built with a newer
flex) is the loss of the #include "config.h" but
this is not used in the other .l files elsewehre and does not
seem to matter on modern systems.

The generated output from compile_et asn1_compile has not changed
(so I think the hx509 case is safe).

The mdssvc case just has changed file locations and line numbers.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

heimdal: Exclude more of plugin.c if HAVE_DLOPEN (which Samba unsets) is not set

2020-08-07T03:23:43+00:00

This allows us to avoid warnings and errors due to unsued variables
and functions.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

heimdal: Use #ifdef HAVE_DLOPEN around function used by HAVE_DLOPEN

2020-08-07T03:23:43+00:00

Signed-off-by: Gary Lockyer 
Reviewed-by: Douglas Bagnall

heimdal: Use #ifdef HAVE_DLOPEN around functions used only by HAVE_DLOPEN

2020-08-07T03:23:43+00:00

Signed-off-by: Gary Lockyer 
Reviewed-by: Douglas Bagnall

kdc: allow checksum of PA-FOR-USER to be HMAC_MD5

2020-06-11T02:48:58+00:00

even if the tgt session key uses different hmac.

Per [MS-SFU] 2.2.1 PA-FOR-USER the checksum is
always HMAC_MD5, and that's what windows 7 client
and MIT client send.

In heimdal both the client and kdc use the checksum of
the tgt key instead and therefore work with each other
but windows and MIT clients fail against heimdal KDC.

Windows KDC allows either checksum (HMAC_MD5 or from
tgt) so we should do the same to support all clients.

Signed-off-by: Isaac Boukris 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Thu Jun 11 02:48:58 UTC 2020 on sn-devel-184