gss-proxy.git - gssproxy wip repository

	Commit message (Collapse)	Author	Age	Files	Lines
*	Add mechglue functions declarations	Simo Sorce	2012-06-26	1	-0/+114
\|
*	Add simple functions to map errors	Simo Sorce	2012-06-26	2	-0/+26
\| \| \| \| \| \| \| \| \| \|	The mechglue stores a map of errors/mech oids, this means that we should never return the same error we got from a mechanism after re-entering the mechglue as we then may get the mechglue confused and prevent us from asking an interposed mech for the error. Also we want to try to aqvoid collisions from errors returned from the proxy, as they could end up fetching errors from the wrong mechanism. For now just make a very simple mapping by always adding a special error base.
*	Add function to special-filter OID sets	Simo Sorce	2012-06-26	2	-0/+54
\|
*	Add function to return a special mech	Simo Sorce	2012-06-26	3	-0/+62
\| \| \| \| \| \| \|	When the interposer wants to call the mechglue and have it call a real mechanism it does so by providing a speecial mechanism oid. This is an invalid oid that the mechglue transforms back into a real OID before selecting the appropriate mechanism.
*	Add loop avoidance in proxy daemon and gssapi plugin	Simo Sorce	2012-06-26	2	-0/+11
\|
*	Add initialization code	Simo Sorce	2012-06-26	2	-0/+201
\| \| \| \| \| \| \|	For now return fixed list of mechanisms. Later on we can try to fetch this list from the proxy. Also split RPC client code from actual plugin
*	Add macro to suppress const warnings	Simo Sorce	2012-06-26	1	-0/+2
\|
*	Save internal errors in init_sec_context	Simo Sorce	2012-06-26	1	-0/+2
\|
*	Add function to report internal client errors	Simo Sorce	2012-06-26	2	-0/+19
\| \| \| \| \| \| \|	This is to allow gss_display_status to return a meaningful error if there is an internal client error as opposed to a returned proxy server error. If we do not do this a call to gpm_display_status() after a failure would return a NULL string and give no clue about the error.
*	Move release_name to the proper place	Simo Sorce	2012-06-26	2	-11/+10
\|
*	Fix gpm_display_status	Simo Sorce	2012-06-26	1	-19/+13
\| \| \| \| \| \| \|	Fix some assumptions in gpm_display_status and make it clearly state no error is available, when we do not have one. This is so that the plugin code later on will know when to properly fall back to ask to the local provider.
*	Add gss_inquire_name to mechglue	Simo Sorce	2012-06-26	2	-0/+64
\|
*	Fix DEBUG message format	Simo Sorce	2012-06-26	1	-1/+2
\|
*	memset default input token for init_sec_context	Simo Sorce	2012-06-26	1	-3/+2
\|
*	Fix handling deleg_creds in accept_sec_context	Simo Sorce	2012-06-26	1	-13/+10
\| \| \| \|	We would segfault if the user didn't want delegated redentials.
*	Fix segfaults when NULL buffer is passed in.	Simo Sorce	2012-06-26	2	-5/+11
\|
*	Use gp_find_and_free_cred() in gp_release_handle().	Günther Deschner	2012-06-25	1	-4/+1
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Add gp_find_and_free_cred().	Günther Deschner	2012-06-25	2	-0/+30
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Add free_config() and call it when server shuts down.	Günther Deschner	2012-06-25	3	-0/+27
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Finally use ring buffer in import and export calls.	Günther Deschner	2012-06-25	1	-8/+84
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Make gp_import_gssx_cred() static, it is not used outside this file.	Günther Deschner	2012-06-25	2	-2/+1
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Pass down struct gp_service to import and export credential calls.	Günther Deschner	2012-06-25	6	-7/+15
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Allow to set per service ring buffer, with configurable size.	Günther Deschner	2012-06-25	1	-0/+45
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Set pointer to one of the existing ring buffers in service loading.	Günther Deschner	2012-06-25	1	-0/+8
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Add gp_service_get_ring_buffer to retrieve buffer from a service.	Günther Deschner	2012-06-25	2	-0/+5
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Add gp_ring_buffer pointer to struct gp_service.	Günther Deschner	2012-06-25	1	-0/+4
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Add gp_read_gss_creds_from_ring_buffer/gp_write_gss_creds_to_ring_buffer.	Günther Deschner	2012-06-25	1	-0/+93
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Add two ring_buffers to gp_config struct.	Günther Deschner	2012-06-25	2	-0/+36
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Add gp_init_ring_buffer/gp_free_ring_buffer.	Günther Deschner	2012-06-25	2	-1/+143
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Mention socket filename in debug output in init_unix_socket().	Günther Deschner	2012-06-21	1	-1/+2
\| \| \| \|	Guenther
*	Fix option_is_set() function.	Günther Deschner	2012-06-21	1	-1/+1
\| \| \| \|	Guenther
*	use option_is_set() config parser helper.	Günther Deschner	2012-05-31	1	-7/+2
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Fix popt usage message for -d option.	Günther Deschner	2012-05-31	1	-1/+1
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	add option_is_set() helper function for config parsing.	Günther Deschner	2012-05-31	1	-0/+12
\| \| \| \| \| \|	Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
*	Replace direct syslog calls with logging macros	Simo Sorce	2012-04-15	4	-23/+15
\|
*	Add logging helpers	Simo Sorce	2012-04-15	4	-4/+71
\|
*	Add some socket debugging	Simo Sorce	2012-04-15	1	-1/+14
\|
*	gp_export: Add facility to export creds as gssx options	Simo Sorce	2012-04-15	3	-0/+268
\| \| \| \|	Add Initial test implementation of the Linux Kernel NFS creds structure.
*	Change accept/init_sec_context to use the new export context functions	Simo Sorce	2012-04-15	3	-13/+23
\|
*	Add support for linux kernel lucid ctx buffer format	Simo Sorce	2012-04-15	1	-11/+130
\|
*	Move ctx_id function and add export type option	Simo Sorce	2012-04-15	4	-107/+152
\| \| \| \| \|	Move the function to export a context to gssx_ctx or import into gp_export.c Add function to check for exported_context_type option in call_ctx
*	Use gp_add_krb5_creds until cred store extensions are available.	Simo Sorce	2012-04-15	2	-35/+88
\|
*	creds: add code to import krb5 credentials based on configuration.	Simo Sorce	2012-04-05	15	-15/+433
\|
*	Depend on UCRED, we cannot work otherwise.	Simo Sorce	2012-04-05	1	-4/+0
\|
*	config: Rework configuration syntax	Simo Sorce	2012-04-05	2	-139/+77
\| \| \| \| \| \| \|	Keeping 2 separate sections for credentials and services seem to just make things really confusing. The off chance of reusing a 'credential' section is dwarfed by the confusion cause by keeping them separate. Having to copy a full service section is not a big deal so KISS wins here.
*	Debug: Add debugging macro and config options	Simo Sorce	2012-04-02	5	-0/+38
\| \| \| \|	Ticket #43
*	Avoid double free on error.	Simo Sorce	2012-04-02	1	-10/+0
\| \| \| \| \|	There is no need to expliciltly free here, as gp_rpc_process_call already always frees the res structure. By doing this we cause double frees on errors.
*	conv: Fix typo causing bad output.	Simo Sorce	2012-03-22	1	-1/+1
\|
*	gp_socket: properly handle fagment bit	Simo Sorce	2012-03-22	2	-2/+20
\|
*	gp_socket: Optimize sending data with writev	Simo Sorce	2012-03-22	1	-21/+22
\| \| \| \| \| \|	Turns out the Linux kernel expects to get the whole reply in a single operation. This optimizes the code to call one less syscall and makes it also more compact. So let's please the kernel and get better code in place.