Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix systemd config file for gssproxy. | Günther Deschner | 2013-03-22 | 1 | -1/+1 |
| | | | | Reviewed-by: Simo Sorce <simo@redhat.com> | ||||
* | Add systemd packaging to gssproxy spec file. | Günther Deschner | 2013-03-22 | 1 | -9/+22 |
| | | | | Reviewed-by: Simo Sorce <simo@redhat.com> | ||||
* | Add various fixes to gssproxy.spec. | Günther Deschner | 2013-03-22 | 1 | -80/+35 |
| | | | | Reviewed-by: Simo Sorce <simo@redhat.com> | ||||
* | Write pid file at startup. | Simo Sorce | 2013-03-22 | 6 | -18/+55 |
| | |||||
* | Make socket path a configure option | Simo Sorce | 2013-03-22 | 5 | -39/+25 |
| | | | | | | | The kernel uses the fixed path named /var/run/gssproxy.sock Make this default a configure time option and default to it. Also remove the option to change the socket at configure time, neither the kernel nor proxymech.so can cope with a change anyway. | ||||
* | Enable kernel support. | Simo Sorce | 2013-03-22 | 5 | -0/+61 |
| | | | | | | | | The Linux kernel now requires the gss-proxy to signal when it is available. This is done by writing 1 to the file /proc/net/rpc/use-gss-proxy Once this happens the kernel will try to attach to the gss-proxy socket and use it instead of the classic rpc.svcgssd daemon. | ||||
* | Remove gssproxy.service | Simo Sorce | 2013-03-22 | 1 | -14/+0 |
| | | | | | This file is generated by gssproxy.service.in so keep only the source in git. | ||||
* | Fix gssi_context_time for remote calls. | Günther Deschner | 2013-03-14 | 1 | -4/+3 |
| | | | | | | lifetime is alredy returned as remaining seconds of lifetime. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | Fix gssi_import_sec_context_by_mech() | Günther Deschner | 2013-03-14 | 1 | -1/+1 |
| | | | | | | Use spmech->length as we are replacing the original oid with spmech. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | mechglue: add trace debugging | Günther Deschner | 2013-03-14 | 13 | -0/+146 |
| | | | | | | This is enabled via --with-gssidebug. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | interpostest: improve debug output when gss_context_time() fails. | Günther Deschner | 2013-03-14 | 1 | -2/+5 |
| | | | | Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | Add debug statement when gp_rpc_execute is called. | Günther Deschner | 2013-03-14 | 2 | -17/+64 |
| | | | | | | Add code to print the name of tehe GSSX function being executed. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | Add support to get peer's SeLinux context | Simo Sorce | 2013-03-14 | 1 | -2/+21 |
| | |||||
* | Use gssrpc instead of system rpc | Simo Sorce | 2013-03-14 | 4 | -5/+10 |
| | | | | | This avoids issues with libraris like libtirpc as gssrpc renames all the symbols to avoid clashes with system libraries. | ||||
* | Add custom implementation of xdr_uint64_t | Simo Sorce | 2013-03-14 | 4 | -1/+90 |
| | | | | This is needed because gssrpc doesn't have one. | ||||
* | Fix includes | Simo Sorce | 2013-03-14 | 6 | -0/+6 |
| | | | | | These includes are necessary when switching to gssrpc because they are not automatically dragged in via dependencies in system rpc.h | ||||
* | mechglue: initialize gpp cred_handle in gssi_acquire_cred_with_password(). | Günther Deschner | 2013-02-22 | 1 | -1/+1 |
| | |||||
* | mechglue: fix gssi_set_cred_option() arguments. | Günther Deschner | 2013-02-22 | 2 | -4/+4 |
| | |||||
* | interposer-plugin: Fix MIT 1.11 gssi_import_sec_context_by_mech symbol name. | Günther Deschner | 2013-02-15 | 2 | -8/+8 |
| | |||||
* | Add example GSS-API mechanism plugins config file. | Günther Deschner | 2013-01-15 | 3 | -1/+7 |
| | | | | The file is not installed automatically yet. | ||||
* | Change interposer usage, clients need to set GSS_USE_PROXY=1|YES. | Günther Deschner | 2013-01-15 | 2 | -3/+6 |
| | | | | | | The variable _GSSPROXY_LOOPS has been changed in favor of GSS_USE_PROXY. From now on, applications needs to explicitly enable the usage of the gssproxy interposer inception. | ||||
* | Move master version to 0.0.99 | Simo Sorce | 2012-11-06 | 1 | -1/+1 |
| | | | | This will set us on course for a 0.1.0 release. | ||||
* | build: check for gss_import_cred and gss_export_cred. | Günther Deschner | 2012-11-02 | 1 | -0/+6 |
| | |||||
* | Use new gss_import/export_cred functions | Simo Sorce | 2012-10-25 | 10 | -404/+98 |
| | | | | | | | This allows us to remove the ring_buffer hack and become completely stateless as well as remove a possible DoS avenue. R.I.P. Ring Buffer :-) | ||||
* | Makefile: Add src/mechglue/gss_plugin.h to header list. | Günther Deschner | 2012-10-25 | 1 | -1/+2 |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | ||||
* | Add doc about current and future planned behavior | Simo Sorce | 2012-10-25 | 1 | -0/+111 |
| | |||||
* | interposetest: add more debug statements. | Günther Deschner | 2012-10-25 | 1 | -0/+13 |
| | |||||
* | interposetest: add test for gss_export_name_composite() | Günther Deschner | 2012-10-25 | 1 | -0/+11 |
| | |||||
* | Implement export_name_composite | Günther Deschner | 2012-10-25 | 2 | -0/+28 |
| | |||||
* | Call gss_export_name_composite() from gp_conv_name_to_gssx(). | Günther Deschner | 2012-10-25 | 2 | -1/+23 |
| | | | | Make sure to return success in gp_conv_name_to_gssx() at that point. | ||||
* | Add gpm_export_name_composite(). | Günther Deschner | 2012-10-25 | 2 | -0/+31 |
| | |||||
* | interposetest: test gss_wrap_size_limit(). | Günther Deschner | 2012-10-25 | 1 | -0/+16 |
| | |||||
* | interposetest: test gss_wrap_iov/gss_unwrap_iov. | Günther Deschner | 2012-10-25 | 1 | -0/+99 |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | ||||
* | interposetest: add test for gss_export_name(). | Günther Deschner | 2012-10-25 | 1 | -0/+10 |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | ||||
* | Add context related tests | Simo Sorce | 2012-10-25 | 1 | -4/+98 |
| | |||||
* | Add get/verify mic tests | Simo Sorce | 2012-10-25 | 1 | -4/+53 |
| | |||||
* | Use a debug macro in interposer test | Simo Sorce | 2012-10-25 | 1 | -20/+30 |
| | |||||
* | Add interposer tests for wrap/unwrap | Simo Sorce | 2012-10-25 | 1 | -0/+41 |
| | |||||
* | New test program to exercise the mechglue plugin | Simo Sorce | 2012-10-25 | 3 | -3/+543 |
| | |||||
* | Implement internal_release_oid | Simo Sorce | 2012-10-25 | 2 | -0/+27 |
| | |||||
* | Implement misc spi calls | Simo Sorce | 2012-10-25 | 3 | -0/+219 |
| | |||||
* | Implement privacy/integrity mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+421 |
| | |||||
* | Implement indicate mechs related mechglue wrappers | Simo Sorce | 2012-10-25 | 4 | -1/+218 |
| | |||||
* | Implement name related mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+457 |
| | |||||
* | Implement display status mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+76 |
| | |||||
* | Implement init sec context mechglue wrapper | Simo Sorce | 2012-10-25 | 4 | -0/+229 |
| | |||||
* | Implement accept sec context mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+168 |
| | |||||
* | Implement context related mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+461 |
| | | | | | Use the new spi call in order to be able to properly implement a context locally. | ||||
* | Implement cred related mechglue wrappers | Simo Sorce | 2012-10-25 | 4 | -0/+833 |
| | |||||
* | Add name handle wrapper | Simo Sorce | 2012-10-25 | 10 | -116/+147 |
| |