summaryrefslogtreecommitdiffstats
path: root/src/lib/gssapi/krb5
Commit message (Collapse)AuthorAgeFilesLines
...
* Always copy the mechtype so that delete_sec_context() can safelyTheodore Tso1997-07-162-1/+11
| | | | | | release the OID without smashing memory passed in by the application. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10117 dc483132-0cff-0310-8789-dd5450dbe970
* Added code so that a valid credential handle is generated whenKevin Mitchell1997-06-302-3/+75
| | | | | | credentials are delegated. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10106 dc483132-0cff-0310-8789-dd5450dbe970
* accept_sec_context.c (krb5_gss_accept_sec_context): Reorganized errorTheodore Tso1997-06-074-172/+220
| | | | | | | | | | | | | | | | handling code to be more compact (and correct!). If an error occurs while we are doing mutual authentication, send an KRB_ERROR message back to the client, so that it knows what is going on. (This is specified by RFC 1964; we just weren't implementing this previously.) delete_sec_context.c (krb5_gss_delete_sec_context): Check to make sure pointers in the context are non-zero before freeing them. init_sec_context.c (krb5_gss_init_sec_context): If the server sends a KRB_ERROR message, decode it and return an appropriate minor status error code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10094 dc483132-0cff-0310-8789-dd5450dbe970
* Added V2 functions to the glue layerTheodore Tso1997-04-016-17/+74
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10041 dc483132-0cff-0310-8789-dd5450dbe970
* Fix really stupid typoTheodore Tso1997-04-011-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10040 dc483132-0cff-0310-8789-dd5450dbe970
* import_name.c (krb5_gss_import_name): Add support for importing theTheodore Tso1997-03-283-6/+64
| | | | | | | | | exported name call export_name.c (gss_export_name): Fix export_name emit the token exactly as specified by RFC 2078. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10038 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Add canon_name.c, duplicate_name.c, export_name.c to theTheodore Tso1997-03-286-0/+213
| | | | | | | | | | | | | | | GSSAPI library. gssapiP_krb5.h (KG_IMPLFLAGS): Add support for GSS_C_PROT_READY_FLAG and GSS_C_TRANS_FLAG canon_name.c (gss_canonicalize_name): New GSSAPI V2 function duplicate_name.c (gss_duplicate_name): New GSSAPI V2 function export_name.c (gss_export_name): New GSSAPI V2 function git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10031 dc483132-0cff-0310-8789-dd5450dbe970
* A zero-length token should be treated like a GSS_C_NO_BUFFER duringTheodore Tso1997-03-252-2/+8
| | | | | | the initial context establishment. [krb5-libs/352] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10026 dc483132-0cff-0310-8789-dd5450dbe970
* Moved some of the library list file build logic from the individual MakefilesRichard Basch1997-02-232-9/+11
| | | | | | to config/win-post.in git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9964 dc483132-0cff-0310-8789-dd5450dbe970
* Removed unneeded call to krb5_init_etsRichard Basch1997-02-201-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9927 dc483132-0cff-0310-8789-dd5450dbe970
* Replace instances of krb5_xfree..Richard Basch1997-02-192-5/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9910 dc483132-0cff-0310-8789-dd5450dbe970
* Merge of libhack_branchTom Yu1997-02-093-21/+51
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9831 dc483132-0cff-0310-8789-dd5450dbe970
* util_crypt.c: Include k5-int.h because we need to access the privateRichard Basch1997-02-062-1/+7
| | | | | | cryptosystem structures of the krb5_encrypt_block structure git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9798 dc483132-0cff-0310-8789-dd5450dbe970
* Windows/NT integration (V1_0_WIN32_BRANCH merge)Richard Basch1997-02-066-154/+167
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9788 dc483132-0cff-0310-8789-dd5450dbe970
* Merge V1_0_FREEZE_3 into the mainline. (Note this merge does *not*Theodore Tso1996-12-136-45/+96
| | | | | | include the doc subtree!!) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9632 dc483132-0cff-0310-8789-dd5450dbe970
* * acquire_cred.c (acquire_accept_cred): use krb5_kt_get_entryBarry Jaspan1996-12-042-36/+14
| | | | | | | instead of scanning through keytab to find matching principal [krb5-libs/210] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9601 dc483132-0cff-0310-8789-dd5450dbe970
* ser_sctx.c (kg_oid_externalize, kg_oid_internalize,Theodore Tso1996-10-195-12/+183
| | | | | | | | | | | | | | | | | | kg_oid_size): Add a GSSAPI OID magic number to the externalized OID, so that if the OID is skipped, (it is optional), the serialization code can resyncronize if necessary. (kg_queue_internalize, kg_queue_externalize, kg_queue_size): New functions to externalize the gssapi queue. (kg_ctx_size, kg_ctx_exteranlize, kg_ctx_import): Changed to include the mech_used field and to include the auth context. gssapi_krb5.c (kg_get_context): Add calls to correctly initialize the serializers needed by import and export sec context. delete_sec_context.c (krb5_gss_delete_sec_context): Remember to release the mech_used OID if necessary! git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9213 dc483132-0cff-0310-8789-dd5450dbe970
* *** empty log message ***Marc Horowitz1996-10-161-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9187 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (krb5_gss_accept_sec_context): return anMarc Horowitz1996-10-161-21/+37
| | | | | | | error if the ticket endtime is in the past. also, cleaned up some error cleanup code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9186 dc483132-0cff-0310-8789-dd5450dbe970
* Don't let the "timeleft" returned by krb5_gss_acquire_cred be negative!Theodore Tso1996-10-102-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9159 dc483132-0cff-0310-8789-dd5450dbe970
* Definition of gss_nt_krb5_name was incorrect; someone was being aTheodore Tso1996-10-092-1/+6
| | | | | | bonehead. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9154 dc483132-0cff-0310-8789-dd5450dbe970
* Fix stupid bug; don't free buf before it's allocated!Theodore Tso1996-08-282-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8998 dc483132-0cff-0310-8789-dd5450dbe970
* * Require DES-CBC-CRC. This works alwaysSam Hartman1996-08-222-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8965 dc483132-0cff-0310-8789-dd5450dbe970
* * acquire_cred.c (krb5_gss_acquire_cred): Add const to localEzra Peisach1996-08-022-1/+7
| | | | | | variable which is pointing to const data. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8896 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (OBJS): Remove trailing backslash on a comment; itTom Yu1996-07-262-1/+6
| | | | | | was keeping HDRS from getting set. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8846 dc483132-0cff-0310-8789-dd5450dbe970
* Add AC_PROG_INSTALL, since it's needed for a "make install"Theodore Tso1996-07-262-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8830 dc483132-0cff-0310-8789-dd5450dbe970
* restore old version (oops checked in debugging versTom Yu1996-07-261-3/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8827 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: remove trailing backslash from comment under SRCSTom Yu1996-07-263-1/+10
| | | | | | because it was causing line that set OBJS variable to git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8826 dc483132-0cff-0310-8789-dd5450dbe970
* init_sec_context.c (krb5_gss_init_sec_context): Fixed error checkingTheodore Tso1996-07-255-22/+31
| | | | | | | | | | so that if you pass a bad mechanism type, it *will* get flagged as an error. rel_oid.c (krb5_gss_release_oid): krb5_gss_glue.c(gss_release_oid): Re-enable function git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8813 dc483132-0cff-0310-8789-dd5450dbe970
* * acquire_cred.c (krb5_gss_acquire_cred): Initialize variableEzra Peisach1996-07-252-0/+7
| | | | | | | | | before use if GSS_C_NULL_OID_SET. This was causing random failures in gssftp. I was unlucky enough to hit that random case where one of the random stack values was zero. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8812 dc483132-0cff-0310-8789-dd5450dbe970
* ser_sctx.c (kg_oid_externalize): Add proper return codeTheodore Tso1996-07-254-6/+16
| | | | | | | | | accept_sec_context.c (krb5_gss_accept_sec_context): init_sec_context.c (krb5_gss_init_sec_context): Test (gss_flags & XXXX) against 0 so that we pass a int value to g_order_init. Needed since int is 16 bits for Win16 build. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8810 dc483132-0cff-0310-8789-dd5450dbe970
* Fix broken Windows commands to copy gssapi_krb5.h to include/gssapiTheodore Tso1996-07-242-1/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8790 dc483132-0cff-0310-8789-dd5450dbe970
* Must include k5-int.h on Windows and Macintosh buildsTheodore Tso1996-07-242-0/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8789 dc483132-0cff-0310-8789-dd5450dbe970
* this commit includes all the changes on the OV_9510_INTEGRATION andMarc Horowitz1996-07-2240-1003/+2032
| | | | | | | | | OV_MERGE branches. This includes, but is not limited to, the new openvision admin system, and major changes to gssapi to add functionality, and bring the implementation in line with rfc1964. before committing, the code was built and tested for netbsd and solaris. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8774 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: remove ref to ET_RULESTom Yu1996-06-142-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8360 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Update special rule for gssapi_err_krb5.obj so that itTheodore Tso1996-06-132-5/+5
| | | | | | uses the right Win-32 library command. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8348 dc483132-0cff-0310-8789-dd5450dbe970
* Checked in missing _WIN32 #ifdefTheodore Tso1996-06-131-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8345 dc483132-0cff-0310-8789-dd5450dbe970
* Add #ifdef _WIN32 in places where we had #ifdef _MSDOSTheodore Tso1996-06-122-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8308 dc483132-0cff-0310-8789-dd5450dbe970
* cvsignore hackeryTom Yu1996-06-101-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8288 dc483132-0cff-0310-8789-dd5450dbe970
* Changed `mutual' element of struct _krb5_gss_ctx_id_rec into more generalKevin Mitchell1996-06-076-12/+21
| | | | | | | `gss_flags' and updated functions that process it; now get delegation flag set properly :) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8275 dc483132-0cff-0310-8789-dd5450dbe970
* * k5seal.c k5unseal.c util_cksum.c:Richard Basch1996-05-154-11/+14
| | | | | | | setup krb5_checksum "contents" and "length" field prior to calling krb5_calculate_checksum(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8029 dc483132-0cff-0310-8789-dd5450dbe970
* Change call to krb5_auth_con_setcksumtype to useTheodore Tso1996-05-142-1/+7
| | | | | | krb5_auth_con_set_req_cksumtype by default instead. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8018 dc483132-0cff-0310-8789-dd5450dbe970
* Renamed MD5 routines to be preceded with krb5_Richard Basch1996-04-133-22/+27
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7806 dc483132-0cff-0310-8789-dd5450dbe970
* Return GSS_S_CRED_UNAVAIL on if krb5_cc_set_flags() returns an error,Theodore Tso1996-04-122-1/+8
| | | | | | | since that's the call that will return an error if the credentials files doesn't exist. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7794 dc483132-0cff-0310-8789-dd5450dbe970
* If make_ap_req() returns KRB5APP_TKT_EXPIRED, then returnTheodore Tso1996-04-102-0/+8
| | | | | | GSS_S_CREDENTIALS_EXPIRED as the major return code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7779 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in (SRCS): Inlined list of source files for SRCS and OBJSTheodore Tso1996-04-023-6/+18
| | | | | | | | | (for Macintosh build). k5mech.c: Added Macintosh #ifdef so that the #include path is right for the Macintosh. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7747 dc483132-0cff-0310-8789-dd5450dbe970
* Don't compile this procedure, since it's not used. The mechanism glueTheodore Tso1996-03-212-0/+10
| | | | | | layer uses the krb5_gss_internal_relase_oid() function. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7694 dc483132-0cff-0310-8789-dd5450dbe970
* Comment out #ident line. This causes the Macintosh C compilerTheodore Tso1996-03-212-2/+9
| | | | | | | indigestion. Remove #include of gssapi/gssapi.h, since that gets included by gssapiP_generic.h. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7686 dc483132-0cff-0310-8789-dd5450dbe970
* Synchronize .Sanitize with current realityEzra Peisach1996-03-201-1/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7673 dc483132-0cff-0310-8789-dd5450dbe970
* use PROTOTYPE and K&R style definitions, per krb5 styleMark Eichin1996-03-121-6/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7605 dc483132-0cff-0310-8789-dd5450dbe970