Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Fix gssi_import_sec_context_by_mech() | Günther Deschner | 2013-03-14 | 1 | -1/+1 | |
| | | | | | | Use spmech->length as we are replacing the original oid with spmech. Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | mechglue: add trace debugging | Günther Deschner | 2013-03-14 | 13 | -0/+146 | |
| | | | | | | This is enabled via --with-gssidebug. Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | interpostest: improve debug output when gss_context_time() fails. | Günther Deschner | 2013-03-14 | 1 | -2/+5 | |
| | | | | Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Add debug statement when gp_rpc_execute is called. | Günther Deschner | 2013-03-14 | 2 | -17/+64 | |
| | | | | | | Add code to print the name of tehe GSSX function being executed. Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Add support to get peer's SeLinux context | Simo Sorce | 2013-03-14 | 1 | -2/+21 | |
| | ||||||
* | Use gssrpc instead of system rpc | Simo Sorce | 2013-03-14 | 4 | -5/+10 | |
| | | | | | This avoids issues with libraris like libtirpc as gssrpc renames all the symbols to avoid clashes with system libraries. | |||||
* | Add custom implementation of xdr_uint64_t | Simo Sorce | 2013-03-14 | 4 | -1/+90 | |
| | | | | This is needed because gssrpc doesn't have one. | |||||
* | Fix includes | Simo Sorce | 2013-03-14 | 6 | -0/+6 | |
| | | | | | These includes are necessary when switching to gssrpc because they are not automatically dragged in via dependencies in system rpc.h | |||||
* | mechglue: initialize gpp cred_handle in gssi_acquire_cred_with_password(). | Günther Deschner | 2013-02-22 | 1 | -1/+1 | |
| | ||||||
* | mechglue: fix gssi_set_cred_option() arguments. | Günther Deschner | 2013-02-22 | 2 | -4/+4 | |
| | ||||||
* | interposer-plugin: Fix MIT 1.11 gssi_import_sec_context_by_mech symbol name. | Günther Deschner | 2013-02-15 | 2 | -8/+8 | |
| | ||||||
* | Add example GSS-API mechanism plugins config file. | Günther Deschner | 2013-01-15 | 3 | -1/+7 | |
| | | | | The file is not installed automatically yet. | |||||
* | Change interposer usage, clients need to set GSS_USE_PROXY=1|YES. | Günther Deschner | 2013-01-15 | 2 | -3/+6 | |
| | | | | | | The variable _GSSPROXY_LOOPS has been changed in favor of GSS_USE_PROXY. From now on, applications needs to explicitly enable the usage of the gssproxy interposer inception. | |||||
* | Move master version to 0.0.99 | Simo Sorce | 2012-11-06 | 1 | -1/+1 | |
| | | | | This will set us on course for a 0.1.0 release. | |||||
* | build: check for gss_import_cred and gss_export_cred. | Günther Deschner | 2012-11-02 | 1 | -0/+6 | |
| | ||||||
* | Use new gss_import/export_cred functions | Simo Sorce | 2012-10-25 | 10 | -404/+98 | |
| | | | | | | | This allows us to remove the ring_buffer hack and become completely stateless as well as remove a possible DoS avenue. R.I.P. Ring Buffer :-) | |||||
* | Makefile: Add src/mechglue/gss_plugin.h to header list. | Günther Deschner | 2012-10-25 | 1 | -1/+2 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Add doc about current and future planned behavior | Simo Sorce | 2012-10-25 | 1 | -0/+111 | |
| | ||||||
* | interposetest: add more debug statements. | Günther Deschner | 2012-10-25 | 1 | -0/+13 | |
| | ||||||
* | interposetest: add test for gss_export_name_composite() | Günther Deschner | 2012-10-25 | 1 | -0/+11 | |
| | ||||||
* | Implement export_name_composite | Günther Deschner | 2012-10-25 | 2 | -0/+28 | |
| | ||||||
* | Call gss_export_name_composite() from gp_conv_name_to_gssx(). | Günther Deschner | 2012-10-25 | 2 | -1/+23 | |
| | | | | Make sure to return success in gp_conv_name_to_gssx() at that point. | |||||
* | Add gpm_export_name_composite(). | Günther Deschner | 2012-10-25 | 2 | -0/+31 | |
| | ||||||
* | interposetest: test gss_wrap_size_limit(). | Günther Deschner | 2012-10-25 | 1 | -0/+16 | |
| | ||||||
* | interposetest: test gss_wrap_iov/gss_unwrap_iov. | Günther Deschner | 2012-10-25 | 1 | -0/+99 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | interposetest: add test for gss_export_name(). | Günther Deschner | 2012-10-25 | 1 | -0/+10 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Add context related tests | Simo Sorce | 2012-10-25 | 1 | -4/+98 | |
| | ||||||
* | Add get/verify mic tests | Simo Sorce | 2012-10-25 | 1 | -4/+53 | |
| | ||||||
* | Use a debug macro in interposer test | Simo Sorce | 2012-10-25 | 1 | -20/+30 | |
| | ||||||
* | Add interposer tests for wrap/unwrap | Simo Sorce | 2012-10-25 | 1 | -0/+41 | |
| | ||||||
* | New test program to exercise the mechglue plugin | Simo Sorce | 2012-10-25 | 3 | -3/+543 | |
| | ||||||
* | Implement internal_release_oid | Simo Sorce | 2012-10-25 | 2 | -0/+27 | |
| | ||||||
* | Implement misc spi calls | Simo Sorce | 2012-10-25 | 3 | -0/+219 | |
| | ||||||
* | Implement privacy/integrity mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+421 | |
| | ||||||
* | Implement indicate mechs related mechglue wrappers | Simo Sorce | 2012-10-25 | 4 | -1/+218 | |
| | ||||||
* | Implement name related mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+457 | |
| | ||||||
* | Implement display status mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+76 | |
| | ||||||
* | Implement init sec context mechglue wrapper | Simo Sorce | 2012-10-25 | 4 | -0/+229 | |
| | ||||||
* | Implement accept sec context mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+168 | |
| | ||||||
* | Implement context related mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+461 | |
| | | | | | Use the new spi call in order to be able to properly implement a context locally. | |||||
* | Implement cred related mechglue wrappers | Simo Sorce | 2012-10-25 | 4 | -0/+833 | |
| | ||||||
* | Add name handle wrapper | Simo Sorce | 2012-10-25 | 10 | -116/+147 | |
| | ||||||
* | Add context handle wrapper | Simo Sorce | 2012-10-25 | 6 | -19/+24 | |
| | ||||||
* | Add cred handle wrapper | Simo Sorce | 2012-10-25 | 7 | -26/+31 | |
| | ||||||
* | Add function to ease copying oids | Simo Sorce | 2012-10-25 | 2 | -0/+25 | |
| | ||||||
* | Add function to convert remote context to local | Simo Sorce | 2012-10-25 | 2 | -0/+18 | |
| | ||||||
* | Add simple functions to map errors | Simo Sorce | 2012-10-25 | 2 | -0/+26 | |
| | | | | | | | | | | The mechglue stores a map of errors/mech oids, this means that we should never return the same error we got from a mechanism after re-entering the mechglue as we then may get the mechglue confused and prevent us from asking an interposed mech for the error. Also we want to try to aqvoid collisions from errors returned from the proxy, as they could end up fetching errors from the wrong mechanism. For now just make a very simple mapping by always adding a special error base. | |||||
* | Add function to return a special mech | Simo Sorce | 2012-10-25 | 3 | -0/+204 | |
| | | | | | | | | When the interposer wants to call the mechglue and have it call a real mechanism it does so by providing a speecial mechanism oid. This is an oid composed of the procy plugin oid and the real mechanism oid that the mechglue transforms back into a real OID before selecting the appropriate mechanism. | |||||
* | Add mechanism to select behavior based on envvar | Simo Sorce | 2012-10-25 | 2 | -0/+38 | |
| | ||||||
* | Add loop avoidance in proxy daemon and gssapi plugin | Simo Sorce | 2012-10-25 | 2 | -0/+11 | |
| |