| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
|
|
| |
function. Allows global override of default keytab for
gss_acquire_cred() purposes.
(acquire_accept_cred): Implement override.
* gssapi_krb5.h: Add krb5_gss_register_acceptor_identity.
ticket: 880
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15236 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15219 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
If a context is accepted with GSS_C_NO_CREDENTIAL or if a credential
is acquired with GSS_C_NO_NAME as the acceptor name then allow any
principal in the keytab to be used as the acceptor name.
This means that gss_inquire_cred can return GSS_C_NO_NAME from a
credential.
ticket: new
Tags: enhancement
cc: nicolas.williams@sun.com
cc: krbdev@mit.edu
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15218 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
shared libraries depend at a make level on com_err if we use the
system com_err library.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15212 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
| |
acquired by acquire_cred(), so instead of the suggested patch,
validate verifier_cred_handle only if we didn't acquire_cred().
* accept_sec_context.c (krb5_gss_accept_sec_context): Don't
validate verifier_cred_handle if GSS_C_NO_CREDENTIAL is passed in.
ticket: 1356
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15211 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
* set_ccache.c (gss_krb5_ccache_name): Don't return a pointer to
freed memory.
ticket: 1346
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15205 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
not appropriate for inquire_cred() to cause new credentials to be
fetched.
* init_sec_context.c (krb5_gss_init_sec_context): Explicitly
release default cred in the NO_CREDENTIAL case, so it is always
refreshed.
ticket: 1305
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15201 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
* gssapi_krb5.c (kg_get_defcred): Check for invalid or expired
defcred if it exists, and call acquire_cred() again if necessary.
ticket: 1305
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15199 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
windows.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15189 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15186 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15185 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15179 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
command on Windows preserves modtimes, so spurious rebuilds were
happening even with the stamp file, since the target in $(EHDRDIR)
is always out of date with respect to the stamp file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15178 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15177 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15171 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
conditionally create the target directory $(EHDRDIR) if needed, before copying
files into it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15128 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
the directory is created before installation of the file.
($(EHDRDIR)$(S)gssapi_generic.h): Likewise.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15125 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
explicitly in directories using those macros.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15111 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
to use the lib.in and libobj.in makefile fragments. Pushing this per-directory
info into Makefile.in will make it a little easier to work on combining
configure scripts for multiple directories.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15107 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
the initial gssapi token if credentials are being delegated. For
consistency with Microsoft, we encrypt the credentials using the
session key not the subsession key.
Ticket: 1054
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15091 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15089 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
* util_token.c (g_verify_token_header g_make_token_header):
Accept -1 to mean that no token type is expected; the token type
is purely an RFC 1964 artifact and is not used in other mechanisms
such as SPNEGO.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15029 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
lengths for arguments to g_token_size and g_make_token_header.
* export_name.c (krb5_gss_export_name): Change local length
variable to unsigned.
* k5unseal.c (kg_unseal_v1): Seqnum variable changed from
krb5_int32 to krb5_ui_4.
* k5seal.c (make_seal_token_v1): Change seqnum argument to
krb5_ui_4 from krb5_int32 to match krb5_gss_ctx_id_rec struct.
* gssapiP_krb5.h, util_crypt.c, util_seqnum.c: kg_make_seq_num(),
kg_get_seq_num() changed to use krb5_ui_4 for sequence
numbers. kg_encrypt(), kg_decrypt() length argument now unsigned.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15007 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
g_verfy_token_header to take an unsigned length in.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15006 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
| |
probably called by setting DESTDIR.
ticket: 1208
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14912 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
dependencies
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14897 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14786 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
those covered by CVSROOT/cvsignore patterns. Static UNIX build only, at the
moment, may need updates for other configurations.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14783 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14779 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14778 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
now for Windows since we use "/" as a directory separator in places
where Windows would also look for command options.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14776 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14761 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14744 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
length argument a pointer to an unsigned int.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14653 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
length return argument to g_verify_token_header.
* accept_sec_context.c (krb5_gss_accept_sec_context): Pass
OM_uint32 * instead of krb5_error_code * to krb5_gss_release_cred.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14652 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
not used.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14651 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
| |
Error tables should always be loaded on other platforms.
* gss_libinit.c: updated for Mac OS X header paths and added
include of gssapiP_krb5.h to get function prototypes.
[pullups from 1-2-2-branch]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14647 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
for the Mac because we can't assume people will include them and
get the OID macro and the old names on the Mac.
* disp_status.c: Updated Mac OS X header paths.
* gssapiP_krb5.h: Updated Mac OS X header paths and added
prototype on Mac.
* gssapi_krb5.h: Updated Mac OS X headers to new framework layout
* gssapi_krb5.h, gssapi_krb5.c: Added oids from rfc 1964 using the
suggested names.
[pullups from 1-2-2-branch]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14646 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14637 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
krb5_gss_internal_release_oid, which is referenced only in its own source file.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14636 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gssapi.hin: Conditionalized pragmas for Metrowerks
* gssapi.hin: Added check for CFM compiles. Removed dependency on
PRAGMA_* macros. Moved check struct alignment check before struct
declarations.
* disp_com_err_status.c, gssapi.hin, gssapi_generic.h:
Updated Mac OS X headers to new framework layout
* gssapi_generic.h: Fixed check for Mac OS X includes.
[pullups from 1-2-2-branch]
* gssapiP_generic.h: use "" include for krb5.h
[pullup from 1-2-2-branch]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14635 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14631 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14630 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
enctypes supported by the GSS code, use that set as a filter on the default
enctypes and use the resulting list.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14629 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
memory ccache type
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14628 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14594 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14592 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14591 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14522 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14452 dc483132-0cff-0310-8789-dd5450dbe970
|