krb5.git/src/lib/gssapi/generic, branch proxymech Unnamed repository; edit this file 'description' to name the repository. Introduce gss_export_cred and gss_import_cred 2012-09-11T05:15:43+00:00 Greg Hudson ghudson@mit.edu 2012-08-19T03:40:29+00:00 abc6b8ce993c4c8393228ab5a01f26e7c5b251b2 Add gss_export_cred and gss_import_cred mechglue functions to serialize and unserialize GSSAPI credential handles. Mechanism implementations and tests will follow. ticket: 7354 (new) 
Add gss_export_cred and gss_import_cred mechglue functions to
serialize and unserialize GSSAPI credential handles.  Mechanism
implementations and tests will follow.

ticket: 7354 (new)
Add support for GSS_C_NT_COMPOSITE_EXPORT 2012-08-31T16:03:49+00:00 Luke Howard lukeh@padl.com 2012-08-28T23:47:24+00:00 8626fe9fb6cb14e92b84a68fca5209d0ee656f74 ticket: 7347 (new) 
ticket: 7347 (new)
Clean up k5buf_to_gss helper 2012-08-23T16:59:00+00:00 Greg Hudson ghudson@mit.edu 2012-08-23T16:58:29+00:00 be74d2e7fa486fd7e5cf59b7e845278164cfb76a k5buf_to_gss was used in only one place (generic_gss_oid_to_str), where we want to include the terminating null byte in the GSS buffer. Remove that assumption from the helper, and instead explicitly append the null byte to the buffer before translating. 
k5buf_to_gss was used in only one place (generic_gss_oid_to_str),
where we want to include the terminating null byte in the GSS buffer.
Remove that assumption from the helper, and instead explicitly append
the null byte to the buffer before translating.
Add debug mode to gssapi_alloc.h 2012-08-11T04:28:26+00:00 Greg Hudson ghudson@mit.edu 2012-08-11T04:05:24+00:00 8589d81b99db347b7440bc6c21c618aa240d66dc Because the gssalloc macros are normally equivalent to malloc and free on Unix, we cannot use the full test suite to find cases where we allocate with malloc and free with gssalloc_free or vice versa. Provide a way to test for this kind of bug (if only in a special build configuration) by supporting a DEBUG_GSSALLOC symbol, which causes the gssalloc wrappers to be deliberately incompatible with malloc and free. 
Because the gssalloc macros are normally equivalent to malloc and free
on Unix, we cannot use the full test suite to find cases where we
allocate with malloc and free with gssalloc_free or vice versa.
Provide a way to test for this kind of bug (if only in a special build
configuration) by supporting a DEBUG_GSSALLOC symbol, which causes the
gssalloc wrappers to be deliberately incompatible with malloc and
free.
Explain memory allocation policy in oid_ops.c 2012-08-01T18:44:35+00:00 Greg Hudson ghudson@mit.edu 2012-08-01T18:43:43+00:00 120408c1516d39bccbdfc8ed8dfdf620d9908179 






Introduce credential store extensions
2012-07-20T18:02:31+00:00

Simo Sorce
simo@redhat.com

2012-03-02T23:27:49+00:00

25ee704e83c2c63d4b5ecd12ea31c1979239041e

Add new APIs gss_acquire_cred_from, gss_add_cred_from, and
gss_store_cred_into, which take additional argments to specify the
location of the credential storage using a key-value map, where keys
are interpreted by the mechanisms.

ticket: 7217 (new)





Add new APIs gss_acquire_cred_from, gss_add_cred_from, and
gss_store_cred_into, which take additional argments to specify the
location of the credential storage using a key-value map, where keys
are interpreted by the mechanisms.

ticket: 7217 (new)







Use internal release function in oid_ops.c
2012-07-18T15:39:56+00:00

Simo Sorce
simo@redhat.com

2012-05-11T23:31:23+00:00

6892e2453fa1865f17f7372519c74ce7ad5f9503

In the end the internal one is called in all cases, but it seem
cleaner to use the internal one instead of relying on the redirection.





In the end the internal one is called in all cases, but it seem
cleaner to use the internal one instead of relying on the redirection.







define USE_HEAPALLOC in gssapi_alloc.h
2012-07-16T13:31:15+00:00

Kevin Wasserman
kevin.wasserman@painless-security.com

2011-10-26T11:24:23+00:00

c8cd6bd75776de265e34bc2dae9b3fd234759126

Easier to disable for testing.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>

ticket: 7211 (new)





Easier to disable for testing.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>

ticket: 7211 (new)







Fix up gssapi_ext.h Doxygen markup somewhat
2012-03-27T02:32:57+00:00

Greg Hudson
ghudson@mit.edu

2012-03-27T02:32:57+00:00

3baf23b396e8aa331a2abeaa72ade021ce960be1

* Bring formatting for gss_userok and gss_authorize_localname into
  conformance.
* Bring parameter markup for gss_localname into conformance.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25790 dc483132-0cff-0310-8789-dd5450dbe970





* Bring formatting for gss_userok and gss_authorize_localname into
  conformance.
* Bring parameter markup for gss_localname into conformance.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25790 dc483132-0cff-0310-8789-dd5450dbe970







Better short/long descs in gss_display_mech_attr
2012-02-03T03:19:33+00:00

Greg Hudson
ghudson@mit.edu

2012-02-03T03:19:33+00:00

cc587e04483345509a8f5f21edd3de6e52e33a35

RFC 5587 defines an "arc name" and a "purpose" for each mechanism
attribute.  gss_display_mech_attr was returning the purpose (which
isn't very short) in short_desc and a null buffer in long_desc (which
isn't necessarily conformant to the spec).  Instead, output the arc
name as the short_desc and the purpose as the long_desc.  This is more
useful and also more consistent with Heimdal, which outputs the arc
name as short_desc and either the purpose string or an empty string
for long_desc.

ticket: 7085

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25668 dc483132-0cff-0310-8789-dd5450dbe970





RFC 5587 defines an "arc name" and a "purpose" for each mechanism
attribute.  gss_display_mech_attr was returning the purpose (which
isn't very short) in short_desc and a null buffer in long_desc (which
isn't necessarily conformant to the spec).  Instead, output the arc
name as the short_desc and the purpose as the long_desc.  This is more
useful and also more consistent with Heimdal, which outputs the arc
name as short_desc and either the purpose string or an empty string
for long_desc.

ticket: 7085

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25668 dc483132-0cff-0310-8789-dd5450dbe970