aboutsummaryrefslogtreecommitdiffstats
path: root/packet-gssapi.c
AgeCommit message (Collapse)AuthorFilesLines
2004-01-19char *drep -> guint8 *drepJörg Mayer1-3/+3
svn path=/trunk/; revision=9735
2003-11-16Export "protocol_t" as an opaque type.Guy Harris1-2/+2
Make "proto_is_protocol_enabled()" and "proto_get_protocol_short_name()" take a "protocol_t *" as an argument, so they don't have to look up the "protocol_t" - this will probably speed them up considerably, and they're called on almost every dissector handoff. Get rid of a number of "proto_is_protocol_enabled()" calls that aren't necessary (dissectors called through handles, including those called through dissector tables, or called as heuristic dissectors, aren't even called if their protocol isn't enabled). Change some direct dissector calls to go through handles. svn path=/trunk/; revision=8979
2003-07-16Move all DCERPC authentication/encryption dissection code from packet-dcerpc.cTim Potter1-3/+46
to the dissector that handles the particular authentication flavour. This gets rid of a couple of ugly switch statements and allows other authentication modules to be written easily. svn path=/trunk/; revision=8026
2002-12-02Don't discard the constness of arguments to GHashTable functions.Guy Harris1-4/+4
svn path=/trunk/; revision=6719
2002-11-28Handle GSS_Wrap header information as well as context-level tokens. AGuy Harris1-41/+68
call to "gssapi_init_oid()" supplies both dissectors for context-level tokens and GSS_Wrap header information; the latter dissector should return the number of bytes of header information, so that if the header information and the message for the protocol that's using GSSAPI are treated as a single blob of data (as is the case with LDAP, but not with DCE RPC, for example), the dissector for the protocol using GSSAPI knows where to start dissecting. We associate a pointer to the entire data structure for the OID, not the handle for context-level token dissector for the OID, with conversations and frames. Make the dissector for NTLMSSP verifiers be the handler for GSS_Wrap stuff for NTLMSSP, and add support for GSS_Wrap stuff for Kerberos. Support SASL GSS-SPNEGO wrapping of LDAP messages. (XXX - this should really check for GSS-SPNEGO.) svn path=/trunk/; revision=6692
2002-11-23Note that the verifiers are GSS_Wrap tokens (apparently).Guy Harris1-1/+9
svn path=/trunk/; revision=6668
2002-11-06Note that it's perfectly OK to store a dissector handle as per-frame orGuy Harris1-3/+8
per-conversation data. svn path=/trunk/; revision=6570
2002-11-06There can be more than one GSS-API negotiation in a conversation, so theGuy Harris1-13/+30
handle to use to dissect GSS-API inner context tokens has to be stored as per-frame data, not just as conversation data. svn path=/trunk/; revision=6569
2002-11-05In connection-oriented DCE RPC, the authentication data are credentialsGuy Harris1-30/+48
only in bind, bind_ack, alter_context, alter_context_response, and auth3 PDUs; they're a verifier of some sort in other PDUs. The verifier appears to start with an OID for the real authentication mechanism if the authentication type is SPNEGO. svn path=/trunk/; revision=6563
2002-09-29Include <string.h>.Gerald Combs1-1/+3
svn path=/trunk/; revision=6356
2002-09-08Add a "gssapi_lookup_oid()" that takes a binary OID (pointer and length)Guy Harris1-21/+35
as an argument, and looks up that OID in the GSSAPI OID hash table. Always use that routine to look up OIDs, so that we never use the result of "format_oid()" as the key (as that doesn't necessarily work). Make "gssapi_oids" static, as one should only look up GSSAPI authentication mechanism OIDs with "gssapi_lookup_oid()". In the SPNEGO dissector, free up the OID strings when we're done with them, and don't advance the offset past the OID until after we put the OID into the protocol tree. svn path=/trunk/; revision=6228
2002-09-08Add a copyright :-)Richard Sharpe1-1/+3
svn path=/trunk/; revision=6226
2002-09-08Do *N*O*T* use the result of "format_oid()" as a key to look up a entryGuy Harris1-8/+12
in the gssapi_oids hash table; the keys are just text representations of the numbers in the OID, but "format_oid()" can add a formatted description of the OID to the end of the string it returns, which means it won't match. Use -1 rather than "tvb_length_remaining(tvb, 0)" as the length to say "this item goes to the end of the tvbuff. svn path=/trunk/; revision=6225
2002-09-05Fix up compiler warning problems ...Richard Sharpe1-6/+1
svn path=/trunk/; revision=6188
2002-09-04Add some level of OID naming etc ...Richard Sharpe1-14/+25
svn path=/trunk/; revision=6180
2002-08-31Make "gssapi_init_oid()" take a dissector handle rather than aGuy Harris1-4/+4
registered dissector name; that means you don't have to register a dissector by name to associate it with a GSS-API security mechanism OID. svn path=/trunk/; revision=6163
2002-08-31Make sure we stop processing GSS-API tokens when we actually have finishedRichard Sharpe1-1/+2
and not try to parse unrelated info in the TVB. svn path=/trunk/; revision=6162
2002-08-31Catch exceptions thrown while dissecting the GSS-API stuff, so that weGuy Harris1-121/+141
don't abort dissection of the entire packet if we get a ReportedBoundsError while dissecting an authentication blob - the authentication blob might be in the middle of a packet, and if it's too short, that doesn't mean that the stuff *after* it shouldn't be dissected. svn path=/trunk/; revision=6160
2002-08-29OK, we now dissect the innerContextToken properly, and SPNEGO understands aRichard Sharpe1-2/+6
negTokenTarg, there is just more work to do on this. svn path=/trunk/; revision=6127
2002-08-29OK, add more conversation stuff for gssapi ... see iff it works now.Richard Sharpe1-17/+44
svn path=/trunk/; revision=6126
2002-08-29Start the code to keep state in GSSAPI.Richard Sharpe1-8/+27
Since we only need the dissector handle, I cheated :-) This should not cause problems (famous last words) svn path=/trunk/; revision=6125
2002-08-29Guided by Guy and an examination of RFC2078 and RFC2478, I have added someRichard Sharpe1-1/+14
comments about what we need to do to get SPNEGO properly implemented. More work to do. svn path=/trunk/; revision=6121
2002-08-28Removed trailing whitespaces from .h and .c files using theJörg Mayer1-12/+12
winapi_cleanup tool written by Patrik Stridvall for the wine project. svn path=/trunk/; revision=6117
2002-08-28Ohh, I feel so good. More of SPNEGO ...Richard Sharpe1-2/+5
Still more to come. SHould have the negTokenInit done soon, then onto the negTokenTarg ... svn path=/trunk/; revision=6109
2002-08-27OK, fix up the problems of the previous commit ...Richard Sharpe1-8/+3
svn path=/trunk/; revision=6105
2002-08-26Plug a memory leak, by freeing the OID string generated byGuy Harris1-5/+27
"format_oid()" after we're done with it. "format_oid()" doesn't necessarily generate a string containing only the numerical OID value, so we can't use that string to search for an OID in the OID hash table. Generate the string used in that lookup ourselves, instead. svn path=/trunk/; revision=6089
2002-08-25Small fix to get the OIDs to display properly in GSSAPI.Richard Sharpe1-6/+8
Next to turn SPNEGO into SPNEGO and not SNEGO ... and display the contents properly as NTLMSSP. svn path=/trunk/; revision=6083
2002-08-24Make the filter name for GSS-API tokens "gss-api", not "GSS-API", toGuy Harris1-2/+2
1) match the protocol's filter name (which isn't used, as we never put entries into the protocol tree for the protocol itself) and 2) make it more obvious what you type. (This matches what the NTLMSSP dissector does for its security blobs.) svn path=/trunk/; revision=6076
2002-08-21A dissector for GSS-API (rfc2078). This is used by Windows 2000/XP whenTim Potter1-0/+231
the extended security bit is set. svn path=/trunk/; revision=6047
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-24 03:05:29 +0000