krb5.git/src/lib, branch proxymech

New SPI call to import creds by oid

2012-09-14T21:02:16+00:00

This extension makes it possible for an interposer to know which
interposed mechanism the mechglue intended to use when multiple
mechanisms are being interposed by the same plugin.

New SPI call to import a name by mech oid

2012-09-14T21:02:00+00:00

This extension makes it possible for an interposer to know which
interposed mechanism the mechglue intended to use when multiple
mechanisms are being interposed by the same plugin.

New SPI call to import a context by oid

2012-09-14T21:02:00+00:00

This extension makes it possible for an interposer to know which
interposed mechanism the mechglue intended to use when multiple
mechanisms are being interposed by the same plugin.

Check creds to select mech in accept_sec_context

2012-09-14T21:01:59+00:00

Distinguish between requested and selected oids

2012-09-14T21:01:54+00:00

Pick the right set of OIDs to use in mechglue functions.
We have 3 oids to care for:
The desired/requested oid, it can be a valid oid or a special interposer oid
used to avoid looping back to an interposer plugin when the interposer wants to
access a local mechanism.
The selected_oid, that is the actual oid of the mechanism we are going to use,
it could be an interposer oid.
The public oid, which normally is the same as the desired/requested oid except
when a special interposer oid is used by an interposer.

FIXME: Set the right mech_type on contexts

- issue with accept_sec_context, how to fallback to local mechanism ?
- may need to use magic fallback error

Add function to return the Public OID

2012-09-13T20:18:12+00:00

Special care needs to be taken to avoid returning special interposer plugin
OIDs to user applications.
The public OID is the OID that should be returned to users of the GSSAPI.
This is not the same as the internal OID which could be a special interposer
plugin OID.

Add function to get the mechanism type to use

2012-09-13T20:18:12+00:00

This is needed since gssint_get_mechanism(NULL) now can return an interposer
mechanism, and then mech->mech_type will not point to the right mechanism
type, but to the interposer plugin OID. Also for special interposer OIDs we
need to use the real mechanism type when the passed in oid is special.

Never return interposers OIDs

2012-09-13T20:18:12+00:00

This function is used to return te reply for gss_indicate_mechs(), and we do
not want applications to see interposer mechs, they should never be exposed
directly to apps.

Add interposer plugin type loader

2012-09-13T20:18:11+00:00

Also initialialize any interposer plugin as soon as configuration is
loaded from the file. This is to insure interposer are configured
before actual mechanisms they may want to interpose are.

Allow to define an interposer in the conf file

2012-09-13T20:18:11+00:00