krb5.git/src/lib/gssapi, branch master-mechdconf

use lstat to check for the mtime of modified symlinks as well.

2014-04-10T13:29:03+00:00

Signed-off-by: Günther Deschner

Support loading of multiple configuration files in /etc/gss/mech.d.

2014-04-10T13:29:03+00:00

This is done by globbing for *.conf files in that directory.

Signed-off-by: Günther Deschner

Remove some dead code from the mechglue initialization layer.

2014-04-10T13:29:03+00:00

Signed-off-by: Günther Deschner

Fix t_seqstate build with Solaris compiler

2014-03-28T15:53:46+00:00

The Solaris native compiler (as of version 5.9) outputs code for
static inline functions even if they are not used.  So the
k5buf_to_gss helper in gssapiP_generic.h causes t_seqstate to have a
dependency on libkrb5support.

ticket: 7872

Rewrite GSS sequence state tracking code

2014-03-18T15:59:11+00:00

Replace util_ordering.c with a new file util_seqstate.c, implemented
using a bitmap of previously received sequence numbers instead of a
20-element circular queue.  This approach has slightly different
limitations--it can check for replays for values within 64 of the
expected next number, where the old code could check within the range
of the last 20 received numbers regardless of how far apart they are.
The new approach should work as well or better for any realistic
packet reordering scenario.

ticket: 7879 (new)

Improve internal API for GSS sequence numbers

2014-03-18T15:58:50+00:00

Use an opaque structure type instead of a void pointer for the
sequence number state.  Rename all functions to use a g_seqstate
prefix rather than a mix of g_order and g_queue.  Remove the
unneccessary indirection from the state object parameter in
g_seqstate_check and g_seqstate_free.  Return OM_uint32 where we
return a GSS major code, long where we return an errno value, and void
where we can't fail.

Add tests for GSSAPI sequence number processing

2014-03-18T15:55:39+00:00

ticket: 7872

Fix GSS krb5 initial sequence number gap handling

2014-03-18T15:55:39+00:00

Since #2040, the dummy queue element inserted by g_order_init no
longer compares less than the initial sequence number, so we fail when
the first few sequence numbers are received out of order.  Properly
detect when a sequence number fits between the dummy element and the
first real queue element.

[ghudson@mit.edu: rewrote commit message]

ticket: 7872
target_version: 1.12.2
tags: pullup

Fix clean-unix rule for gssapi_krb5.h

2014-03-08T16:23:35+00:00

Don't delete gssapi_krb5.h now that it is not generated.

[ghudson@mit.edu: also remove from generate-files-mac rule and from
.gitignore]

Fix install rule for gssapi_krb5.h

2014-02-28T20:38:27+00:00

Revert r16428 now that gssapi_krb5.h is in the source tree.