summaryrefslogtreecommitdiffstats
path: root/src/lib/gssapi
Commit message (Collapse)AuthorAgeFilesLines
...
* * acquire_cred.c (krb5_gss_register_acceptor_identity): NewTom Yu2003-03-063-19/+61
| | | | | | | | | | | | function. Allows global override of default keytab for gss_acquire_cred() purposes. (acquire_accept_cred): Implement override. * gssapi_krb5.h: Add krb5_gss_register_acceptor_identity. ticket: 880 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15236 dc483132-0cff-0310-8789-dd5450dbe970
* Do not expect sequence number in encrypted krb_credSam Hartman2003-03-042-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15219 dc483132-0cff-0310-8789-dd5450dbe970
* GSS_C_NO_CREDENTIAL should accept any principalSam Hartman2003-03-045-40/+62
| | | | | | | | | | | | | | | | If a context is accepted with GSS_C_NO_CREDENTIAL or if a credential is acquired with GSS_C_NO_NAME as the acceptor name then allow any principal in the keytab to be used as the acceptor name. This means that gss_inquire_cred can return GSS_C_NO_NAME from a credential. ticket: new Tags: enhancement cc: nicolas.williams@sun.com cc: krbdev@mit.edu git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15218 dc483132-0cff-0310-8789-dd5450dbe970
* Use com_err_deplib rather than an explicit path so we do not have ourSam Hartman2003-03-021-1/+1
| | | | | | | shared libraries depend at a make level on com_err if we use the system com_err library. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15212 dc483132-0cff-0310-8789-dd5450dbe970
* There isn't really a point to validating cred_handle if it was justTom Yu2003-03-012-6/+11
| | | | | | | | | | | | acquired by acquire_cred(), so instead of the suggested patch, validate verifier_cred_handle only if we didn't acquire_cred(). * accept_sec_context.c (krb5_gss_accept_sec_context): Don't validate verifier_cred_handle if GSS_C_NO_CREDENTIAL is passed in. ticket: 1356 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15211 dc483132-0cff-0310-8789-dd5450dbe970
* Thanks, similar patch appliedTom Yu2003-02-252-6/+52
| | | | | | | | | * set_ccache.c (gss_krb5_ccache_name): Don't return a pointer to freed memory. ticket: 1346 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15205 dc483132-0cff-0310-8789-dd5450dbe970
* * gssapi_krb5.c (kg_get_defcred): Revert previous; it's probablyTom Yu2003-02-243-32/+34
| | | | | | | | | | | | | | not appropriate for inquire_cred() to cause new credentials to be fetched. * init_sec_context.c (krb5_gss_init_sec_context): Explicitly release default cred in the NO_CREDENTIAL case, so it is always refreshed. ticket: 1305 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15201 dc483132-0cff-0310-8789-dd5450dbe970
* This should fix things, but I don't have an easy way to testTom Yu2003-02-212-15/+37
| | | | | | | | | | * gssapi_krb5.c (kg_get_defcred): Check for invalid or expired defcred if it exists, and call acquire_cred() again if necessary. ticket: 1305 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15199 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in ($(GSSAPI_KRB5_HDR)): Use $(S) to avoid problems onTom Yu2003-02-142-1/+6
| | | | | | windows. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15189 dc483132-0cff-0310-8789-dd5450dbe970
* Oops, add $(GSSAPI_KRB5_HDR) to all-unixTom Yu2003-02-132-2/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15186 dc483132-0cff-0310-8789-dd5450dbe970
* More tweaks to deal with parallel buildsTom Yu2003-02-134-28/+32
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15185 dc483132-0cff-0310-8789-dd5450dbe970
* Fix recursion-forcing rules to be more friendly to parallel buildsTom Yu2003-02-114-2/+24
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15179 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Another attempt... turns our that the "copy"Tom Yu2003-02-112-8/+15
| | | | | | | | command on Windows preserves modtimes, so spurious rebuilds were happening even with the stamp file, since the target in $(EHDRDIR) is always out of date with respect to the stamp file. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15178 dc483132-0cff-0310-8789-dd5450dbe970
* Fix some things to avoid spurious rebuilds of header filesTom Yu2003-02-114-13/+28
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15177 dc483132-0cff-0310-8789-dd5450dbe970
* Have g_token_size return unsigned int for signed/unsigned cleanupEzra Peisach2003-02-095-4/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15171 dc483132-0cff-0310-8789-dd5450dbe970
* Use new target create-ehdrdir, defined differently for UNIX and WIN32, toKen Raeburn2003-01-172-6/+11
| | | | | | | conditionally create the target directory $(EHDRDIR) if needed, before copying files into it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15128 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in ($(EHDRDIR)$(S)gssapi.h): Depend on includes-unix, to make sureKen Raeburn2003-01-172-2/+9
| | | | | | | the directory is created before installation of the file. ($(EHDRDIR)$(S)gssapi_generic.h): Likewise. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15125 dc483132-0cff-0310-8789-dd5450dbe970
* Search for ar, ranlib, install in KRB5_BUILD_LIBRARY* macros rather thanKen Raeburn2003-01-102-6/+3
| | | | | | explicitly in directories using those macros. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15111 dc483132-0cff-0310-8789-dd5450dbe970
* Use markers in Makefile.in rather than rules in configure.in to indicate whenKen Raeburn2003-01-107-4/+26
| | | | | | | | to use the lib.in and libobj.in makefile fragments. Pushing this per-directory info into Makefile.in will make it a little easier to work on combining configure scripts for multiple directories. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15107 dc483132-0cff-0310-8789-dd5450dbe970
* For new encryption types and for RC4, encrypt the krb_cred message inSam Hartman2003-01-082-51/+93
| | | | | | | | | | the initial gssapi token if credentials are being delegated. For consistency with Microsoft, we encrypt the credentials using the session key not the subsession key. Ticket: 1054 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15091 dc483132-0cff-0310-8789-dd5450dbe970
* Nuke some old .orig filesKen Raeburn2003-01-086-197/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15089 dc483132-0cff-0310-8789-dd5450dbe970
* 2002-12-05 Sam Hartman <hartmans@mit.edu>Sam Hartman2002-12-062-23/+28
| | | | | | | | | * util_token.c (g_verify_token_header g_make_token_header): Accept -1 to mean that no token type is expected; the token type is purely an RFC 1964 artifact and is not used in other mechanisms such as SPNEGO. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15029 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (krb5_gss_accept_sec_context): Use unsignedEzra Peisach2002-11-158-12/+31
| | | | | | | | | | | | | | | | | | | lengths for arguments to g_token_size and g_make_token_header. * export_name.c (krb5_gss_export_name): Change local length variable to unsigned. * k5unseal.c (kg_unseal_v1): Seqnum variable changed from krb5_int32 to krb5_ui_4. * k5seal.c (make_seal_token_v1): Change seqnum argument to krb5_ui_4 from krb5_int32 to match krb5_gss_ctx_id_rec struct. * gssapiP_krb5.h, util_crypt.c, util_seqnum.c: kg_make_seq_num(), kg_get_seq_num() changed to use krb5_ui_4 for sequence numbers. kg_encrypt(), kg_decrypt() length argument now unsigned. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15007 dc483132-0cff-0310-8789-dd5450dbe970
* * gssapiP_generic.h, util_token.c: Change g_make_token_header andEzra Peisach2002-11-153-5/+12
| | | | | | g_verfy_token_header to take an unsigned length in. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15006 dc483132-0cff-0310-8789-dd5450dbe970
* Implement an install-headers target to install public headers into KRB5_INCDIR;Sam Hartman2002-10-074-2/+10
| | | | | | | | probably called by setting DESTDIR. ticket: 1208 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14912 dc483132-0cff-0310-8789-dd5450dbe970
* Add some dependencies on phony build targets to help with cross-directory ↵Ken Raeburn2002-09-242-0/+7
| | | | | | dependencies git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14897 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Revert $(S)=>/ change, for Windows supportKen Raeburn2002-08-298-15/+31
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14786 dc483132-0cff-0310-8789-dd5450dbe970
* Ignore a bunch of files generated by building in the source tree, excludingKen Raeburn2002-08-292-0/+5
| | | | | | | those covered by CVSROOT/cvsignore patterns. Static UNIX build only, at the moment, may need updates for other configurations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14783 dc483132-0cff-0310-8789-dd5450dbe970
* undo quoting changesKen Raeburn2002-08-272-10/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14779 dc483132-0cff-0310-8789-dd5450dbe970
* more quotingKen Raeburn2002-08-272-4/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14778 dc483132-0cff-0310-8789-dd5450dbe970
* Quote targets of some copy operations within the build tree. NeededKen Raeburn2002-08-274-3/+12
| | | | | | | now for Windows since we use "/" as a directory separator in places where Windows would also look for command options. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14776 dc483132-0cff-0310-8789-dd5450dbe970
* Change $(S)=>/ and $(U)=>.. globallyKen Raeburn2002-08-238-15/+31
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14761 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (SUBDIROBJLISTS): New variableKen Raeburn2002-08-222-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14744 dc483132-0cff-0310-8789-dd5450dbe970
* * gssapiP_generic.h, util_token.c (g_verify_token_header): MakeEzra Peisach2002-07-153-2/+7
| | | | | | length argument a pointer to an unsigned int. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14653 dc483132-0cff-0310-8789-dd5450dbe970
* * k5unseal.c (kg_unseal): Pass unsigned int * instead of int *Ezra Peisach2002-07-153-2/+10
| | | | | | | | | length return argument to g_verify_token_header. * accept_sec_context.c (krb5_gss_accept_sec_context): Pass OM_uint32 * instead of krb5_error_code * to krb5_gss_release_cred. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14652 dc483132-0cff-0310-8789-dd5450dbe970
* * gss_libinit.c (gssint_cleanup_library): Remove variable set butEzra Peisach2002-07-152-4/+9
| | | | | | not used. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14651 dc483132-0cff-0310-8789-dd5450dbe970
* * gss_libinit.c: Conditionalized error table loading for Mac OS X.Tom Yu2002-07-142-0/+17
| | | | | | | | | | | Error tables should always be loaded on other platforms. * gss_libinit.c: updated for Mac OS X header paths and added include of gssapiP_krb5.h to get function prototypes. [pullups from 1-2-2-branch] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14647 dc483132-0cff-0310-8789-dd5450dbe970
* * gssapi_krb5.h: Added #include of gssapi.h and gssapi_generic.hTom Yu2002-07-145-9/+96
| | | | | | | | | | | | | | | | | | | for the Mac because we can't assume people will include them and get the OID macro and the old names on the Mac. * disp_status.c: Updated Mac OS X header paths. * gssapiP_krb5.h: Updated Mac OS X header paths and added prototype on Mac. * gssapi_krb5.h: Updated Mac OS X headers to new framework layout * gssapi_krb5.h, gssapi_krb5.c: Added oids from rfc 1964 using the suggested names. [pullups from 1-2-2-branch] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14646 dc483132-0cff-0310-8789-dd5450dbe970
* update dependenciesKen Raeburn2002-07-132-9/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14637 dc483132-0cff-0310-8789-dd5450dbe970
* Get rid of some unused functions and files. HideKen Raeburn2002-07-1312-522/+21
| | | | | | krb5_gss_internal_release_oid, which is referenced only in its own source file. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14636 dc483132-0cff-0310-8789-dd5450dbe970
* * gssapi_generic.h: allow inclusion by C++Tom Yu2002-07-135-12/+69
| | | | | | | | | | | | | | | | | | | | * gssapi.hin: Conditionalized pragmas for Metrowerks * gssapi.hin: Added check for CFM compiles. Removed dependency on PRAGMA_* macros. Moved check struct alignment check before struct declarations. * disp_com_err_status.c, gssapi.hin, gssapi_generic.h: Updated Mac OS X headers to new framework layout * gssapi_generic.h: Fixed check for Mac OS X includes. [pullups from 1-2-2-branch] * gssapiP_generic.h: use "" include for krb5.h [pullup from 1-2-2-branch] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14635 dc483132-0cff-0310-8789-dd5450dbe970
* * init_sec_context.c (make_ap_req_v2): Delete unused functionKen Raeburn2002-07-122-19/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14631 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (rd_and_store_for_creds): Don't declare krb5_mcc_opsKen Raeburn2002-07-122-2/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14630 dc483132-0cff-0310-8789-dd5450dbe970
* * init_sec_context.c (krb5_gss_init_sec_context): Instead of asking for theKen Raeburn2002-07-122-3/+53
| | | | | | | enctypes supported by the GSS code, use that set as a filter on the default enctypes and use the resulting list. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14629 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (rd_and_store_for_creds): Remove registration of ↵Ken Raeburn2002-07-122-1/+5
| | | | | | memory ccache type git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14628 dc483132-0cff-0310-8789-dd5450dbe970
* * init_sec_context.c (get_credentials): Delete unused variableKen Raeburn2002-07-012-2/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14594 dc483132-0cff-0310-8789-dd5450dbe970
* remove gss krb5 mech2 oid and oidset variablesKen Raeburn2002-07-0110-17/+17
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14592 dc483132-0cff-0310-8789-dd5450dbe970
* fix some compiler warningsKen Raeburn2002-07-013-11/+21
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14591 dc483132-0cff-0310-8789-dd5450dbe970
* update dependenciesKen Raeburn2002-06-153-127/+94
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14522 dc483132-0cff-0310-8789-dd5450dbe970
* reformat commentKen Raeburn2002-05-251-19/+21
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14452 dc483132-0cff-0310-8789-dd5450dbe970