aboutsummaryrefslogtreecommitdiffstats
path: root/packet-gssapi.c
AgeCommit message (Collapse)AuthorFilesLines
2004-01-19char *drep -> guint8 *drepjmayer1-3/+3
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@9735 f5534014-38df-0310-8fa8-9805f1628bb7
2003-11-16Export "protocol_t" as an opaque type.guy1-2/+2
Make "proto_is_protocol_enabled()" and "proto_get_protocol_short_name()" take a "protocol_t *" as an argument, so they don't have to look up the "protocol_t" - this will probably speed them up considerably, and they're called on almost every dissector handoff. Get rid of a number of "proto_is_protocol_enabled()" calls that aren't necessary (dissectors called through handles, including those called through dissector tables, or called as heuristic dissectors, aren't even called if their protocol isn't enabled). Change some direct dissector calls to go through handles. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8979 f5534014-38df-0310-8fa8-9805f1628bb7
2003-07-16Move all DCERPC authentication/encryption dissection code from packet-dcerpc.ctpot1-3/+46
to the dissector that handles the particular authentication flavour. This gets rid of a couple of ugly switch statements and allows other authentication modules to be written easily. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@8026 f5534014-38df-0310-8fa8-9805f1628bb7
2002-12-02Don't discard the constness of arguments to GHashTable functions.guy1-4/+4
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6719 f5534014-38df-0310-8fa8-9805f1628bb7
2002-11-28Handle GSS_Wrap header information as well as context-level tokens. Aguy1-41/+68
call to "gssapi_init_oid()" supplies both dissectors for context-level tokens and GSS_Wrap header information; the latter dissector should return the number of bytes of header information, so that if the header information and the message for the protocol that's using GSSAPI are treated as a single blob of data (as is the case with LDAP, but not with DCE RPC, for example), the dissector for the protocol using GSSAPI knows where to start dissecting. We associate a pointer to the entire data structure for the OID, not the handle for context-level token dissector for the OID, with conversations and frames. Make the dissector for NTLMSSP verifiers be the handler for GSS_Wrap stuff for NTLMSSP, and add support for GSS_Wrap stuff for Kerberos. Support SASL GSS-SPNEGO wrapping of LDAP messages. (XXX - this should really check for GSS-SPNEGO.) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6692 f5534014-38df-0310-8fa8-9805f1628bb7
2002-11-23Note that the verifiers are GSS_Wrap tokens (apparently).guy1-1/+9
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6668 f5534014-38df-0310-8fa8-9805f1628bb7
2002-11-06Note that it's perfectly OK to store a dissector handle as per-frame orguy1-3/+8
per-conversation data. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6570 f5534014-38df-0310-8fa8-9805f1628bb7
2002-11-06There can be more than one GSS-API negotiation in a conversation, so theguy1-13/+30
handle to use to dissect GSS-API inner context tokens has to be stored as per-frame data, not just as conversation data. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6569 f5534014-38df-0310-8fa8-9805f1628bb7
2002-11-05In connection-oriented DCE RPC, the authentication data are credentialsguy1-30/+48
only in bind, bind_ack, alter_context, alter_context_response, and auth3 PDUs; they're a verifier of some sort in other PDUs. The verifier appears to start with an OID for the real authentication mechanism if the authentication type is SPNEGO. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6563 f5534014-38df-0310-8fa8-9805f1628bb7
2002-09-29Include <string.h>.gerald1-1/+3
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6356 f5534014-38df-0310-8fa8-9805f1628bb7
2002-09-08Add a "gssapi_lookup_oid()" that takes a binary OID (pointer and length)guy1-21/+35
as an argument, and looks up that OID in the GSSAPI OID hash table. Always use that routine to look up OIDs, so that we never use the result of "format_oid()" as the key (as that doesn't necessarily work). Make "gssapi_oids" static, as one should only look up GSSAPI authentication mechanism OIDs with "gssapi_lookup_oid()". In the SPNEGO dissector, free up the OID strings when we're done with them, and don't advance the offset past the OID until after we put the OID into the protocol tree. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6228 f5534014-38df-0310-8fa8-9805f1628bb7
2002-09-08Add a copyright :-)sharpe1-1/+3
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6226 f5534014-38df-0310-8fa8-9805f1628bb7
2002-09-08Do *N*O*T* use the result of "format_oid()" as a key to look up a entryguy1-8/+12
in the gssapi_oids hash table; the keys are just text representations of the numbers in the OID, but "format_oid()" can add a formatted description of the OID to the end of the string it returns, which means it won't match. Use -1 rather than "tvb_length_remaining(tvb, 0)" as the length to say "this item goes to the end of the tvbuff. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6225 f5534014-38df-0310-8fa8-9805f1628bb7
2002-09-05Fix up compiler warning problems ...sharpe1-6/+1
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6188 f5534014-38df-0310-8fa8-9805f1628bb7
2002-09-04Add some level of OID naming etc ...sharpe1-14/+25
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6180 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-31Make "gssapi_init_oid()" take a dissector handle rather than aguy1-4/+4
registered dissector name; that means you don't have to register a dissector by name to associate it with a GSS-API security mechanism OID. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6163 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-31Make sure we stop processing GSS-API tokens when we actually have finishedsharpe1-1/+2
and not try to parse unrelated info in the TVB. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6162 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-31Catch exceptions thrown while dissecting the GSS-API stuff, so that weguy1-121/+141
don't abort dissection of the entire packet if we get a ReportedBoundsError while dissecting an authentication blob - the authentication blob might be in the middle of a packet, and if it's too short, that doesn't mean that the stuff *after* it shouldn't be dissected. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6160 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-29OK, we now dissect the innerContextToken properly, and SPNEGO understands asharpe1-2/+6
negTokenTarg, there is just more work to do on this. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6127 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-29OK, add more conversation stuff for gssapi ... see iff it works now.sharpe1-17/+44
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6126 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-29Start the code to keep state in GSSAPI.sharpe1-8/+27
Since we only need the dissector handle, I cheated :-) This should not cause problems (famous last words) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6125 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-29Guided by Guy and an examination of RFC2078 and RFC2478, I have added somesharpe1-1/+14
comments about what we need to do to get SPNEGO properly implemented. More work to do. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6121 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-28Removed trailing whitespaces from .h and .c files using thejmayer1-12/+12
winapi_cleanup tool written by Patrik Stridvall for the wine project. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6117 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-28Ohh, I feel so good. More of SPNEGO ...sharpe1-2/+5
Still more to come. SHould have the negTokenInit done soon, then onto the negTokenTarg ... git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6109 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-27OK, fix up the problems of the previous commit ...sharpe1-8/+3
git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6105 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-26Plug a memory leak, by freeing the OID string generated byguy1-5/+27
"format_oid()" after we're done with it. "format_oid()" doesn't necessarily generate a string containing only the numerical OID value, so we can't use that string to search for an OID in the OID hash table. Generate the string used in that lookup ourselves, instead. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6089 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-25Small fix to get the OIDs to display properly in GSSAPI.sharpe1-6/+8
Next to turn SPNEGO into SPNEGO and not SNEGO ... and display the contents properly as NTLMSSP. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6083 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-24Make the filter name for GSS-API tokens "gss-api", not "GSS-API", toguy1-2/+2
1) match the protocol's filter name (which isn't used, as we never put entries into the protocol tree for the protocol itself) and 2) make it more obvious what you type. (This matches what the NTLMSSP dissector does for its security blobs.) git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6076 f5534014-38df-0310-8fa8-9805f1628bb7
2002-08-21A dissector for GSS-API (rfc2078). This is used by Windows 2000/XP whentpot1-0/+231
the extended security bit is set. git-svn-id: http://anonsvn.wireshark.org/wireshark/trunk@6047 f5534014-38df-0310-8fa8-9805f1628bb7
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-17 15:49:11 +0000