summaryrefslogtreecommitdiffstats
path: root/src/lib/gssapi
Commit message (Collapse)AuthorAgeFilesLines
...
* 2000-09-01 Jeffrey Altman <jaltman@columbia.edu>Jeffrey Altman2000-09-022-13/+58
| | | | | | | | | | | | | | | | * accept_sec_context.c: krb5_gss_accept_sec_context() It has been determined by Martin Rex that Windows 2000 is incapable of supporting channel bindings. This caused us to examine the various RFCs affecting FTP GSSAPI to determine whether or not channel bindings were a MUST for implementation of the FTP GSSAPI protocol. It was determined that the channel binding facility as described in RFC2743 is optional. Therefore, we cannot assume that all clients or servers will support it. The code was updated to allow GSS_C_NO_CHANNEL_BINDINGS when specified by either the client or server to indicate that channel bindings will not be used. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12645 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (SRCS, OBJS, STLIBOBJS): Remove util_canonhost.Ken Raeburn2000-08-043-6/+6
| | | | | | | * gssapiP_generic (g_canonicalize_host, g_local_host_name): Delete declarations. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12604 dc483132-0cff-0310-8789-dd5450dbe970
* pullup from 1.2.1 releaseKen Raeburn2000-07-012-1/+26
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12502 dc483132-0cff-0310-8789-dd5450dbe970
* merge from 1.2 branchKen Raeburn2000-06-301-0/+274
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12471 dc483132-0cff-0310-8789-dd5450dbe970
* pullup from 1.2 branchKen Raeburn2000-06-2717-2111/+1143
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12442 dc483132-0cff-0310-8789-dd5450dbe970
* Check for existance of <memory.h>.Wilfredo Sanchez2000-06-0112-1/+34
| | | | | | (from Nathan Neulinger <nneul@umr.edu>) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12332 dc483132-0cff-0310-8789-dd5450dbe970
* Change wsanchez@apple -> tritan@mitWilfredo Sanchez2000-06-013-6/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12331 dc483132-0cff-0310-8789-dd5450dbe970
* 2000-5-19 Alexandra Ellwood <lxs@mit.edu>Alexandra Ellwood2000-05-192-1/+10
| | | | | | | | | | | * acquire_cred.c: Changed to use krb5int_cc_default. This function supports the Kerberos Login Library and pops up a dialog if the cache does not contain valid tickets. This is used to automatically get a tgt before obtaining service tickets. Note that this should be an internal function because callers don't expect krb5_cc_default to pop up a dialog! (We found this out the hard way :-) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12293 dc483132-0cff-0310-8789-dd5450dbe970
* * wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix upTom Yu2000-04-082-5/+11
| | | | | | | | wrap_size_limit() to deal with integrity wrap tokens properly. The rfc1964 mech always pads and confounds regardless of whether confidentiality is requested. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12155 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in (clean-unix): Add clean-libobjsEzra Peisach2000-02-222-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@12062 dc483132-0cff-0310-8789-dd5450dbe970
* * init_sec_context.c (krb5_gss_init_sec_context): Default to des-cbc-crcKen Raeburn2000-01-272-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11969 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (STLIBOBJS): Properly add gss_libinit.o to permitTom Yu2000-01-244-6/+20
| | | | | | | | | | | compiling. * configure.in: Add libobj to Makefile frags. * gss_libinit.c: Add terminating newline. Use 0 and 1 instead of false and true. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11963 dc483132-0cff-0310-8789-dd5450dbe970
* Moved krb5, gss, and crypto library initialization/cleanup code into new ↵Miro Jurisic2000-01-224-0/+64
| | | | | | dedicated functions; added code to release global state allocated in prng.c git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11960 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (krb5_gss_accept_sec_context): get rid of unused varsKen Raeburn1999-10-272-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11884 dc483132-0cff-0310-8789-dd5450dbe970
* * k5seal.c (make_integ_token_v2): Set 'code' when malloc failsKen Raeburn1999-10-262-1/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11882 dc483132-0cff-0310-8789-dd5450dbe970
* log tritan's changesTom Yu1999-10-263-0/+21
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11877 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES, LOCAL_INCLUDES suchWilfredo Sanchez1999-10-263-5/+3
| | | | | | | that one can override CFLAGS from the command line without losing CPP search patchs and defines. Some associated Makefile cleanup. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11876 dc483132-0cff-0310-8789-dd5450dbe970
* copyright notice updates from 1.1 branchKen Raeburn1999-09-2413-13/+52
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11853 dc483132-0cff-0310-8789-dd5450dbe970
* Improve rule to create gssapi include dir under windowsDanilo Almeida1999-05-194-10/+20
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11466 dc483132-0cff-0310-8789-dd5450dbe970
* These are a bunch of intertwined changes to the windows build.Danilo Almeida1999-05-196-10/+28
| | | | | | | | | | | | | | | | | | | | | | | | This log message includes all of the different changes across several Makefile.in files (and win-pre.in and win-post.in): - Remove "-" from recursive windows make invocations so that we can bail on a build error. New MIGNORE option restores the previous bailing behavior. - Update windows readme to reflect current practices. - Add NO_OUTDIR synonym for NO_OUTPRE in windows build. - Top-level windows Makefile now builds util which now builds util/windows, util/et, and util/profile (instead of building them directly). - Remove trailing backslash from rule that creates the windows output dir. This backslash would cause the rule to always be invoked. - Move WCONFIG and WCONFIG_EXE definitions into win-pre.in. - Remove rules in include directory that blindly copy include header files from gssapi, et, and profile. Instead, use/add build rules to the components that generate them that copy only when the file changes. - Use dependencies in include/krb5 to copy header files instead of blindly copying them. Add !if 0/!endif wrapper to Unix version of the rules. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11464 dc483132-0cff-0310-8789-dd5450dbe970
* Do win32 build in subdirDanilo Almeida1999-05-108-101/+117
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11432 dc483132-0cff-0310-8789-dd5450dbe970
* set_ccache.c (gss_krb5_ccache_name): Add call to free the defaultTheodore Tso1999-04-302-0/+7
| | | | | | credential changing the ccache name. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11413 dc483132-0cff-0310-8789-dd5450dbe970
* Removed #include for gssapi_generic.h from gssapi_krb5.hMiro Jurisic1999-04-292-5/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11405 dc483132-0cff-0310-8789-dd5450dbe970
* wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix wrap_size limit soTheodore Tso1999-04-232-6/+20
| | | | | | | | that it correctly calculates its results, and underestimates the correct size instead of overestimating it, and not returning zero all the time. (Which it used to do after the March 25 fix.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11380 dc483132-0cff-0310-8789-dd5450dbe970
* gssapi_krb5.h, copy_ccache.c, get_tkt_flags.c, set_ccache.c: Make theTheodore Tso1999-04-175-20/+18
| | | | | | krb5 extension functions exportable in a Windows DLL. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11367 dc483132-0cff-0310-8789-dd5450dbe970
* Built the krb5 specific extension function which allows an applicationTheodore Tso1999-04-171-0/+1
| | | | | | program to set the ccache location. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11366 dc483132-0cff-0310-8789-dd5450dbe970
* acquire_cred.c (krb5_gss_acquire_cred): Don't use strcmp to compareTheodore Tso1999-03-272-6/+21
| | | | | | against principal components (they aren't null terminated!) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11320 dc483132-0cff-0310-8789-dd5450dbe970
* gssapi_krb5.c: Rearrange OID's so that the V1V2 mechanism set returnsTheodore Tso1999-03-267-19/+51
| | | | | | | | | | | | | | | | | | | | | | | | all three mechanism ID's recognized by this implementation, with the RFC1964 OID first (and thus preferred). import_sec_context.c (krb5_gss_convert_static_mech_oid): Make the old convert_static_oid() function globally accessible with a namespace compliant name, since init_sec_context() needs to be able to use this function. indicate_mechs.c (krb5_gss_indicate_mechs): Return the v1v2 mechanism set OID, since we should return all the mechanisms that we support. init_sec_context.c (krb5_gss_init_sec_context): Make ctx->mech_used use a static OID, since it is returned by gss_inquire_context which must return a static OID. wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix bug where we would overestimate the size of the allowable input message by one byte, because we weren't passing the right estimate of the wrapped data to g_token_size(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11315 dc483132-0cff-0310-8789-dd5450dbe970
* disp_major_status.c (display_unknown): Fix the length of the buffer toTheodore Tso1999-03-262-1/+7
| | | | | | | be the size of the returned string, instead of something bigger than the returned string. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11314 dc483132-0cff-0310-8789-dd5450dbe970
* Added extern "C" to gssapi_krb5.hMiro Jurisic1999-03-152-0/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11289 dc483132-0cff-0310-8789-dd5450dbe970
* Now actually compilesMiro Jurisic1999-03-152-3/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11286 dc483132-0cff-0310-8789-dd5450dbe970
* Fix obviously missing variable declarationTheodore Tso1999-03-141-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11283 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in (DLL_FILE_DEF): Tell the Makefile template that we areTheodore Tso1999-03-142-0/+7
| | | | | | building object files for the GSSAPI DLL. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11281 dc483132-0cff-0310-8789-dd5450dbe970
* Check in prototype for gss_krb5_ccache_name()Theodore Tso1999-03-141-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11280 dc483132-0cff-0310-8789-dd5450dbe970
* set_ccache.c (gss_krb5_ccache_name): Added new Krb5 specific interfaceTheodore Tso1999-03-123-0/+32
| | | | | | to set the default credentials cache name. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11266 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in (DLL_FILE_DEF): Tell the Makefile template that we areTheodore Tso1999-03-125-54/+65
| | | | | | | | building object files for the GSSAPI DLL. gssapi.hin, gssapi_generic.c: Change use of KRB5_DLLIMP to be GSS_DLLIMP. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11262 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in (DLL_FILE_DEF): Tell the Makefile template that we areTheodore Tso1999-03-123-40/+49
| | | | | | | | building object files for the GSSAPI DLL. krb5_gss_glue.c: Change use of KRB5_DLLIMP to be GSS_DLLIMP. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11261 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in (DLL_FILE_DEF): Tell the Makefile template that we areTheodore Tso1999-03-114-8/+18
| | | | | | | | | building object files for the GSSAPI DLL. g_acquire_cred.c, g_oid_ops.c: Change use of KRB5_DLLIMP to be GSS_DLLIMP. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11260 dc483132-0cff-0310-8789-dd5450dbe970
* accept_sec_context.c (krb5_gss_accept_sec_context): Eliminate doubleTheodore Tso1998-12-223-232/+219
| | | | | | | | | | | | | | | free of ap_req.data, and initialize ctypes to be NULL to avoid freeing a pointer to stack garbage when doing a V1 mechanism accept_sec_contxt. init_sec_context.c: Re-arrange program logic to simplify and factor out code; fix gss_init_sec_context() so that if the default OID is passed to the init_sec_context, it will use the V1 mechanism if a single DES enctype is used. Error handling was revamped to make it simpler and cleaner, and to assure that we don't have memory leaks on error returns. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11093 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Set the myfulldir and mydir variables (which are relativeTheodore Tso1998-12-053-2/+10
| | | | | | | | to buildtop and thisconfigdir, respectively.) configure.in: Use K5_AC_OUTPUT instead of K5_OUTPUT_FILES. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11085 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Set the myfulldir and mydir variables (which are relativeTheodore Tso1998-12-056-0/+21
| | | | | | to buildtop and thisconfigdir, respectively.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11084 dc483132-0cff-0310-8789-dd5450dbe970
* * k5unseal.c (kg2_unwrap_integ): Handle case of malloc(0)Ezra Peisach1998-11-062-13/+20
| | | | | | returning NULL. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11018 dc483132-0cff-0310-8789-dd5450dbe970
* pull up 3des implementation from the marc-3des branchMarc Horowitz1998-10-3030-963/+3118
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11001 dc483132-0cff-0310-8789-dd5450dbe970
* * wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix to round downTom Yu1998-07-252-1/+8
| | | | | | | | by 8 even if the req_output_size-ohlen is a multiple of 8, since the wrap token is always padded regardless of whether it's a mutiple of 8 bytes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10737 dc483132-0cff-0310-8789-dd5450dbe970
* Replaced preprocessor symbol _MACINTOSH with macintosh, since macintosh is ↵Miro Jurisic1998-07-177-12/+12
| | | | | | the standard symbol defined by all Mac compiler (oh, sure, it doesn't have _. but at least it's always there) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10653 dc483132-0cff-0310-8789-dd5450dbe970
* Added magic incantations for Macontosh CFM-68KMiro Jurisic1998-07-141-0/+10
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10633 dc483132-0cff-0310-8789-dd5450dbe970
* k5unseal.c (kg_unseal): Clean up lint warningsTheodore Tso1998-07-026-29/+66
| | | | | | | | | | | | | | | accept_sec_context.c (krb5_gss_accept_sec_context): Don't return an error token if we can't provide the server name to the KRB5 error structure (because cred isn't initialized). gssapi_krb5.c, gssapi_krb5.h: Export the oid of static arrays as krb5_gss_oid_array since it's needed by gss_import_sec_context. import_sec_context.c: Fix up the OID of the mechanism in the imported security context so that we use the static OID if at all possible. This is needed since gss_inquire_context() must return a static OID. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10618 dc483132-0cff-0310-8789-dd5450dbe970
* oid_ops.c (generic_gss_release_oid): Recognize our own (new) "self"Theodore Tso1998-07-022-1/+9
| | | | | | | oids so that we don't free static oid's. (exported_name and nt_service_name_v2). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10616 dc483132-0cff-0310-8789-dd5450dbe970
* util_buffer.c (g_make_string_buffer): Don't include the trailingTheodore Tso1998-05-252-2/+7
| | | | | | NULL of the string in the gss buffer's length. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10580 dc483132-0cff-0310-8789-dd5450dbe970
* Fix typo which caused import_name to incorrectly import names producedTheodore Tso1998-05-252-1/+7
| | | | | | by gss_export_name(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10579 dc483132-0cff-0310-8789-dd5450dbe970
generated by cgit (git 2.34.1) at 2025-09-29 22:35:50 +0000