aboutsummaryrefslogtreecommitdiffstats
path: root/packet-kerberos.c
AgeCommit message (Collapse)AuthorFilesLines
2004-05-14More updates to packetcable kerberosRonnie Sahlberg1-10/+37
in particular, packetcable use a slightly diufferent KDC-REQ-BODY where the field till[5] is optional. Make it optional in the dissector as well since ethereal will still be able to dissecto normal kerberos pdus where it is not optional svn path=/trunk/; revision=10899
2004-05-14work in progress started implementing PA-PK-AS-REQRonnie Sahlberg1-1/+82
svn path=/trunk/; revision=10886
2004-05-14add dissection of pa-prov-srv-location preauthentication type used by ↵Ronnie Sahlberg1-2/+24
packetcable. svn path=/trunk/; revision=10883
2004-05-11Kerberos encryption types are ASN.1 integers, meaning signed values, andGuy Harris1-3/+3
at least one mail message: http://mailman.mit.edu/pipermail/kerberos/2004-February/004653.html shows some of the weird Microsoft encryption type values logged by some KDC implementation as negative integers. Also, show them as decimal in the top-level line for encryption types, just as we do in the lines for each encryption type. svn path=/trunk/; revision=10848
2004-04-15decryption and dissection of PA_ENC_TIMESTAMPRonnie Sahlberg1-4/+80
svn path=/trunk/; revision=10604
2004-04-15dissect EncKDCRepPart applications 25 and 26Ronnie Sahlberg1-1/+131
svn path=/trunk/; revision=10603
2004-04-05Add support to decrypt the encrypted part of AS/TSG -REP PDUs.Ronnie Sahlberg1-4/+62
Now we only need application 25/26 to be dissected as well for it to be useful ... svn path=/trunk/; revision=10553
2004-04-05Added some more principal name types from the kerberos draftRonnie Sahlberg1-8/+14
svn path=/trunk/; revision=10552
2004-04-01add dissection of the canonicalize bit which some windows clients useRonnie Sahlberg1-1/+14
svn path=/trunk/; revision=10536
2004-03-26Fix a typo.Guy Harris1-2/+2
Clean up white space. svn path=/trunk/; revision=10492
2004-03-26From Tomas Kukosa: use the "proto_item_get_parent()" andGuy Harris1-4/+4
"proto_item_get_parent_nth()" routines, and use the new name for some of the constants for universal tags. svn path=/trunk/; revision=10490
2004-03-25From Tomas Kukosa: BER dissector enhancements and proto.c updates toGuy Harris1-194/+1562
support them. From Ronnie Sahlberg: Kerberos updates with new constants from the current draft, decryption and dissection of Kerberos blobs, and changes to work with the changed BER dissector. svn path=/trunk/; revision=10479
2004-02-25for netbios type addresses in kerberosRonnie Sahlberg1-2/+2
print the netbios type as hex and not decimal svn path=/trunk/; revision=10235
2004-02-23update to kerberos. now also decrypting the KRB_PRIB blobsRonnie Sahlberg1-8/+75
(application 21) of kerberos v5. there are commonly found in Kpasswd packets. Not too interesting yet until we start supporting decryption of kerberos blobs using mit/heimdal kerveros shared libraries. svn path=/trunk/; revision=10197
2004-02-20Update to Kerberos.Ronnie Sahlberg1-1163/+1319
Split kerberos prototype into two halves: helpers to dissect ASN.1 BER in packet-ber.c and kerberos stuff using those helpers in packet-kerberos.c This new kerberos thing places filterable items for every single field and also dissects the bitstring Option fields. It is hoped that this will make it easier to extend kerberos to do decryption of service tickets. svn path=/trunk/; revision=10122
2004-01-23"%.*" requires an "int" argument for the length.Guy Harris1-7/+7
svn path=/trunk/; revision=9803
2004-01-21Fix a check.Guy Harris1-2/+2
svn path=/trunk/; revision=9761
2004-01-20The offset argument to a "get_pdu_len" function is an "int", not aGuy Harris1-3/+3
"guint". svn path=/trunk/; revision=9759
2004-01-20signed/unsigned warning fixesJörg Mayer1-83/+85
svn path=/trunk/; revision=9754
2003-12-04update to kerberosRonnie Sahlberg1-1/+8
if the kerberos blob contains a krb error, print the error string to COL_INFO svn path=/trunk/; revision=9170
2003-07-08As "dissect_ap_options()" isn't compiled in, don't mark its arguments asGuy Harris1-2/+2
unused; presumably it'll either 1) get written, in which case if an argument isn't used it shouldn't be supplied or 2) be removed, in which case there aren't any arguments. svn path=/trunk/; revision=7983
2003-07-08Fix some unused parameter and function warnings.Tim Potter1-2/+6
svn path=/trunk/; revision=7981
2003-06-01Fix a small segmentation fault if we get an ASN.1 parse error, andRichard Sharpe1-1/+15
start to work on kerberos flags etc. Also prettied up the case where the responseToken was an empty string. svn path=/trunk/; revision=7767
2003-04-25Show the URL of the I-D giving information on Kerberos-over-TCP.Guy Harris1-1/+5
svn path=/trunk/; revision=7565
2003-04-25From Tony Schene: Kerberos-over-TCP support.Guy Harris1-27/+167
svn path=/trunk/; revision=7564
2002-09-10Fix a typo in Richard's name.Guy Harris1-5/+30
Add some additional information from http://www.isi.edu/people/bcn/krb-revisions/krbclar8-1.html svn path=/trunk/; revision=6245
2002-09-10Add Microsoft's RC4-HMAC and exportable(?) RC4-HMAC encryption types.Guy Harris1-2/+14
svn path=/trunk/; revision=6242
2002-09-08KRB_DECODE_STRING_OR_DIE, and variants thereof, set "val_len" to theGuy Harris1-8/+8
length of the string value and "item_len" to the length of the entire BER item, including the type header. As such, "val_len", not "item_len", should be used when formatting the value, and "item_len", not "val_len", should be used as the length when putting the item into the protocol tree and when advancing the offset. The kvno in an encryptedData item is unsigned; display it as such. svn path=/trunk/; revision=6231
2002-09-07Decode AP-REQ and AP-REP KRB5 message types ...Richard Sharpe1-6/+55
svn path=/trunk/; revision=6211
2002-09-07OK, now have KRB5 dissector playing nice.Richard Sharpe1-7/+7
svn path=/trunk/; revision=6209
2002-09-05Commit my changes to handle KRB5 in SPNEGO ...Richard Sharpe1-8/+3
Turns out it is a KRB5 AP-REQ ASN1 encoded, and the Kerberos dissector is going to need to be re-architected to deal with this. svn path=/trunk/; revision=6187
2002-09-04Add some level of OID naming etc ...Richard Sharpe1-5/+4
svn path=/trunk/; revision=6180
2002-09-01Add the OID that MS created for KRB5 in mistake.Richard Sharpe1-1/+5
svn path=/trunk/; revision=6164
2002-08-31Make "gssapi_init_oid()" take a dissector handle rather than aGuy Harris1-2/+3
registered dissector name; that means you don't have to register a dissector by name to associate it with a GSS-API security mechanism OID. svn path=/trunk/; revision=6163
2002-08-30Include "packet-gssapi.h" to declare routines we call.Guy Harris1-1/+2
svn path=/trunk/; revision=6142
2002-08-30Some more SPNEGO fixes. Getting much closer ...Richard Sharpe1-1/+3
svn path=/trunk/; revision=6140
2002-08-28Removed trailing whitespaces from .h and .c files using theJörg Mayer1-16/+16
winapi_cleanup tool written by Patrik Stridvall for the wine project. svn path=/trunk/; revision=6117
2002-08-22Display NetBIOS names in standard NetBIOS-name style if they have theGuy Harris1-3/+19
right length, and display them with an error indication and using "format_text()" if they're not ("format_text()" deals with the string not being null-terminated, and handles non-printable characters). svn path=/trunk/; revision=6061
2002-08-02Replace the types from sys/types.h and netinet/in.h by their glib.hJörg Mayer1-5/+1
equivalents for the toplevel directory. The removal of winsock2.h will hopefully not cause any problems under MSVC++, as those files using struct timeval still include wtap.h, which still includes winsock2.h. svn path=/trunk/; revision=5932
2002-07-29Committing Kerberos NetBIOS address type stuff from Jim McDonough.Richard Sharpe1-1/+8
svn path=/trunk/; revision=5908
2002-05-01From Joerg Mayer: get rid of unused "title" arguments forGuy Harris1-8/+8
"dissect_Ticket()" and "dissect_Addresses()". svn path=/trunk/; revision=5319
2002-01-21Include files from the "epan" directory and subdirectories thereof withGuy Harris1-3/+3
"epan/..." pathnames, so as to avoid collisions with header files in any of the directories in which we look (e.g., "proto.h", as some other package has its own "proto.h" file which it installs in the top-level include directory). Don't add "-I" flags to search "epan", as that's no longer necessary (and we want includes of "epan" headers to fail if the "epan/" is left out, so that we don't re-introduce includes lacking "epan/"). svn path=/trunk/; revision=4586
2001-12-10Move the pointer to the "column_info" structure in the "frame_data"Guy Harris1-17/+17
structure to the "packet_info" structure; only stuff that's permanently stored with each frame should be in the "frame_data" structure, and the "column_info" structure is not guaranteed to hold the column values for that frame at all times - it was only in the "frame_data" structure so that it could be passed to dissectors, and, as all dissectors are now passed a pointer to a "packet_info" structure, it could just as well be put in the "packet_info" structure. That saves memory, by shrinking the "frame_data" structure (there's one of those per frame), and also lets us clean up the code a bit. svn path=/trunk/; revision=4370
2001-12-03Make "dissector_add()", "dissector_delete()", and "dissector_change()"Guy Harris1-7/+8
take a dissector handle as an argument, rather than a pointer to a dissector function and a protocol ID. Associate dissector handles with dissector table entries. svn path=/trunk/; revision=4308
2001-10-26Fix the rest of the signed/unsigned comparison warnings.Gilbert Ramirez1-5/+7
svn path=/trunk/; revision=4088
2001-04-15Assorted cleanups.Guy Harris1-5/+5
svn path=/trunk/; revision=3305
2001-04-15Tvbuffify the ASN.1 code and the Kerberos, LDAP, and SNMP dissectors.Guy Harris1-209/+253
Clean up some problems that revealed. svn path=/trunk/; revision=3301
2001-01-09Add an additional "protocol index" argument to "{old_}dissector_add()",Guy Harris1-3/+5
"{old_}heur_dissector_add()", "{old_}conv_dissector_add()", and "register_dissector()", so that an entry in those tables has associated with it the protocol index of the protocol the dissector handles (or -1, if there is no protocol index for it). This is for future use in a number of places. (Arguably, "proto_register_protocol()" should take a dissector pointer as an argument, but 1) it'd have to handle both regular and heuristic dissectors; 2) making it take either a "dissector_t" or a union of that and a "heur_dissector_t" introduces some painful header-file interdependencies so I'm punting on that for now. As with other Ethereal internal APIs, these APIs are subject to change in the future, at least until Ethereal 1.0 comes out....) svn path=/trunk/; revision=2849
2001-01-03Ensure that all value_string arrays end in {0, NULL}. Dissectors got awayGilbert Ramirez1-4/+10
with not terminating their arrays because they knew the limits of the value used to look up strings in the value_string array, but the dfilter_expr_dlg does not know these limits and must rely on the terminating {0, NULL} record. Also, in SNA fixed a bug in which a field should have been defined as FT_UINT8 but was defined as FT_BOOLEAN. In WTP, fixed a value string which had duplicate keys. svn path=/trunk/; revision=2817
2001-01-03Have "proto_register_protocol()" build a list of data structures forGuy Harris1-2/+2
protocols, in addition to adding structures to the list of filterable fields. Give it an extra argument that specifies a "short name" for the protocol, for use in such places as pinfo->current_proto; the dialog box for constructing filters; the preferences tab for the protocol; and so on (although we're not yet using it in all those places). Make the preference name that appears in the preferences file and the command line for the DIAMETER protocol "diameter", not "Diameter"; the convention is that the name in question be all-lower-case. Make some routines and variables that aren't exported static. Update a comment in the ICP dissector to make it clear that the dissector won't see fragments other than the first fragment of a fragmented datagram. svn path=/trunk/; revision=2810