gss-proxy.git/proxy/src/mechglue, branch master-wip

Import names as remote name by default.

2013-04-10T13:08:52+00:00

Always use remote name by default, otherwise canonicalization will loose
information about the original name, for example it will convert names of
the special type GSS_C_NT_STRING_UID_NAME or GSS_NT_MACHINE_UID_NAME in a
non reversible way and the proxy will not be a le to use them as intended
(for impersonation by trusted services).

Signed-off-by: Simo Sorce 
Reviewed-by: Günther Deschner

Remove unused variables

2013-04-04T02:51:36+00:00

Signed-off-by: Simo Sorce

Fix a few more resource leaks

2013-04-04T02:51:22+00:00

Still a couple resource leaks after the last Coverity scan

Signed-off-by: Simo Sorce

Fix dereference after null checks found by Coverity

2013-04-03T20:39:11+00:00

Signed-off-by: Simo Sorce

Fix resource leaks found by Coverity

2013-04-03T20:39:11+00:00

Signed-off-by: Simo Sorce

Fix uninizialized variables found by Coverity

2013-04-03T20:39:11+00:00

Signed-off-by: Simo Sorce

Add client side support to set allowed enctypes

2013-03-27T14:30:35+00:00

When using remote credentials, intercept set_cred_option calls and
register an option into the existing set of crdentials with the
request to set allowed entypes at the first use of said crdentials.

Signed-off-by: Simo Sorce 
Reviewed-by: Günther Deschner

Add helper function to check for krb5 oid

2013-03-27T14:30:35+00:00

The krb5 mechanism supports multiple oids for historical reasons.
Add a function to generically check if a mech oid is any of the krb5
mechanism known oids for functions that do not care which exact oid is
being used of the krb5 family.

Signed-off-by: Simo Sorce 
Reviewed-by: Günther Deschner

Use token wrapper in gpp_remote_lo_local_ctx

2013-03-22T18:14:41+00:00

We need to do the wrapping in order to get back an actual local context.
Otherwise we get back an interposed context from gssapi.

Create helper function to wrap token

2013-03-22T18:14:36+00:00

Wrap the token in a helper function so that the code can be reused elsewhere.