summaryrefslogtreecommitdiffstats
path: root/src/lib/gssapi
Commit message (Collapse)AuthorAgeFilesLines
...
* copy_ccache.c (gss_krb5_copy_ccache): Fix bugs in copy_ccache.c, whichTheodore Tso1998-05-254-10/+19
| | | | | | | | | never compiled cleanly (since it wasn't added to the Makefile correctly originally). k5seal.c (make_seal_token): Clean up -Wall flames git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10578 dc483132-0cff-0310-8789-dd5450dbe970
* inq_cred.c (krb5_gss_inquire_cred):Theodore Tso1998-05-2510-37/+58
| | | | | | | | | | | | | inq_context.c (krb5_gss_inquire_context): import_name.c (krb5_gss_import_name): export_name.c (krb5_gss_export_name): disp_name.c (krb5_gss_display_name): context_time.c (krb5_gss_context_time): acquire_cred.c (krb5_gss_acquire_cred): Clean up -Wall flames. indicate_mechs.c (krb5_gss_indicate_mechs): Return a dynamic OID set. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10577 dc483132-0cff-0310-8789-dd5450dbe970
* util_ordering.c (g_order_free):Theodore Tso1998-05-255-14/+44
| | | | | | | | | | rel_oid_set.c (generic_gss_release_oid_set): disp_major_status.c: General lint cleanup. util_oid.c (g_copy_OID_set): Copy the OID set with entirely dynamic memory (don't alias the contents of the OID set). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10576 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (SHLIB_EXPDEPS):Tom Yu1998-04-152-2/+7
| | | | | | (SHLIB_EXPLIBS): Rename libcrypto -> libk5crypto. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10532 dc483132-0cff-0310-8789-dd5450dbe970
* * disp_major_status.c (g_display_major_status): Fix a typo inTom Yu1998-04-012-1/+6
| | | | | | previous. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10513 dc483132-0cff-0310-8789-dd5450dbe970
* Change to not return GSS_S_CONTINUE_NEEDED, per the standard CTheodore Tso1998-03-312-3/+9
| | | | | | bindings specification. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10512 dc483132-0cff-0310-8789-dd5450dbe970
* export_name.c (krb5_gss_export_name): Fix bug in gss_export_name. TheTheodore Tso1998-02-282-1/+7
| | | | | | | 2nd length field in the ASN.1 was 2 bytes bigger than it should have been. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10475 dc483132-0cff-0310-8789-dd5450dbe970
* Remove trailing slash from thisconfigdir. Change directory syntaxTom Yu1998-02-188-8/+28
| | | | | | used in BUILDTOP. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10464 dc483132-0cff-0310-8789-dd5450dbe970
* Change patch so that either mechanism is acceptedTheodore Tso1998-02-132-5/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10434 dc483132-0cff-0310-8789-dd5450dbe970
* accept_sec_context.c (krb5_gss_accept_sec_context): Always allow useTheodore Tso1998-02-132-0/+7
| | | | | | of the pre-RFC mechanism when accepting contexts. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10433 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (krb5_gss_accept_sec_context): Add lots ofTom Yu1998-02-132-15/+32
| | | | | | | | | | explicit assignments to major_status to ensure that we actually return an error when we mean to. This was previously preventing gssrpc authentication with the old ovsec_kadm interface from working because the gssrpc server side functions were failing to loop over a set of supplied credentials. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10428 dc483132-0cff-0310-8789-dd5450dbe970
* * init_sec_context.c: KLUDGE!! Add global variableTom Yu1998-02-122-1/+11
| | | | | | | krb5_gss_dbg_client_expcreds to allow the client library to send expired credentials for testing and debugging purposes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10426 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Add commented out AC_OUTPUT to force autoreconf toTom Yu1998-02-122-0/+6
| | | | | | rebuild the configure script. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10425 dc483132-0cff-0310-8789-dd5450dbe970
* Mass makefile/configure.in build system revampTheodore Tso1998-02-1212-51/+61
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10424 dc483132-0cff-0310-8789-dd5450dbe970
* wrap_size_limit.c (krb5_gss_wrap_size_limit): Fix bug where if theTheodore Tso1998-02-062-2/+15
| | | | | | | output header size is greater than the maximum requested output size, return 0 rather than a very large unsigned number. :-) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10413 dc483132-0cff-0310-8789-dd5450dbe970
* * init_sec_context.c (krb5_gss_init_sec_context): ActuallyTom Yu1998-01-312-5/+10
| | | | | | initialize now before calling make_ap_req. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10396 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in (clean-unix): Remove EXPORTED_BUILT_HEADERS as wellEzra Peisach1998-01-302-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10391 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (rd_and_store_for_creds): Don't mess withDan Winship1998-01-305-3/+74
| | | | | | | | | | | | krb5_cc_default--use a new mem-based ccache. * Makefile.in: * gssapi_krb5.h: * copy_ccache.c (gss_krb5_copy_ccache): Routine to copy a gss_cred_id_t (such as a forwarded creds) into an existing krb5_ccache. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10389 dc483132-0cff-0310-8789-dd5450dbe970
* Add definition of GSS_C_NO_NAME (per draft-ietf-cbind-04.txt)Theodore Tso1998-01-272-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10379 dc483132-0cff-0310-8789-dd5450dbe970
* accept_sec_context.c (krb5_gss_accept_sec_context): Will now obtainTheodore Tso1998-01-242-25/+38
| | | | | | default credentials if no credentials are given. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10375 dc483132-0cff-0310-8789-dd5450dbe970
* init_sec_context.c (make_ap_req): Enforce a stricter requirement onTheodore Tso1998-01-242-2/+27
| | | | | | | | | | the ticket expiration time of the credentials, since accept_sec_context doesn't use the timeskew fudge for checking ticket expirations. (krb5_gss_init_sec_context): Return GSS_S_NO_CRED when appropriate. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10374 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (LIBMINOR): Bump minor version due to internalTom Yu1998-01-222-1/+6
| | | | | | structure change. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10372 dc483132-0cff-0310-8789-dd5450dbe970
* * gssapiP_krb5.h: Add rcache member to the credsTom Yu1998-01-226-2/+46
| | | | | | | | | | | | | | | | | | | structure. [krb5-libs/370] * accept_sec_context.c (krb5_gss_accept_sec_context): Actually set an rcache in auth context from the one saved in the creds structure. [krb5-libs/370] * acquire_cred.c (acquire_accept_cred): Set up an rcache for use later. [krb5-libs/370] * delete_sec_context.c (krb5_gss_delete_sec_context): Don't delete the rcache when freeing the auth_context. [krb5-libs/370] * rel_cred.c (krb5_gss_release_cred): Properly close the rcache. [krb5-libs/370] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10371 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (OBJS): Changed val_cred.$(OBJECT) toEzra Peisach1997-12-292-1/+6
| | | | | | val_cred.$(OBJEXT) for windows building. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10343 dc483132-0cff-0310-8789-dd5450dbe970
* * val_cred.c (krb5_gss_validate_cred): Free principal extractedEzra Peisach1997-12-072-0/+6
| | | | | | from credential cache when finished. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10330 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (krb5_gss_accept_sec_context),Theodore Tso1997-11-167-12/+99
| | | | | | | | | | | | | | | | init_sec_context.c (krb5_gss_init_sec_context), inq_cred.c (krb5_gss_inquire_cred): Call krb5_gss_validate_cred to make sure the credential handle is still valid. * val_cred.c (krb5_gss_validate_cred): New file which validates the credential to make sure it is valid, including checking to make sure the credentials cache still points at the same krb5 principal as it did before. * accept_sec_context.c (krb5_gss_accept_sec_context): Return GSS_S_FAILURE if a non-NULL context handle is passed to it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10285 dc483132-0cff-0310-8789-dd5450dbe970
* (Wrong version of Changelog committed previously)Theodore Tso1997-11-161-1/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10284 dc483132-0cff-0310-8789-dd5450dbe970
* Return GSS_S_FAILURE if a non-NULL context handle is passed to itTheodore Tso1997-11-162-3/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10283 dc483132-0cff-0310-8789-dd5450dbe970
* remove occurences of USE_STRING_H, HAS_STRDUP, and HAS_LABSTom Yu1997-09-193-2/+8
| | | | | | (see ChangeLogs for details) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10199 dc483132-0cff-0310-8789-dd5450dbe970
* * util_token.c (g_verify_token_header): Change local char *Ezra Peisach1997-08-172-1/+6
| | | | | | variable to unsigned char * to match usage. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10178 dc483132-0cff-0310-8789-dd5450dbe970
* Add support for the new OID value for host-based service nameTheodore Tso1997-07-303-0/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10142 dc483132-0cff-0310-8789-dd5450dbe970
* inq_names.c (krb5_gss_inquire_names_for_mech): Add the the new OIDTheodore Tso1997-07-303-1/+20
| | | | | | | | | | value for the host-based service name and the exported name OID to the list of OID's supported by this mechanism. import_name.c (krb5_gss_import_name): Add support for the new OID value for the host-based service name. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10141 dc483132-0cff-0310-8789-dd5450dbe970
* * util_ordering.c: Include string.h for prototypesEzra Peisach1997-07-222-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10124 dc483132-0cff-0310-8789-dd5450dbe970
* (krb5_gss_accept_sec_context): Initialize ctx before it is referenced ↵Ezra Peisach1997-07-222-1/+6
| | | | | | without being set in failure cases git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10123 dc483132-0cff-0310-8789-dd5450dbe970
* Always copy the mechtype so that delete_sec_context() can safelyTheodore Tso1997-07-162-1/+11
| | | | | | release the OID without smashing memory passed in by the application. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10117 dc483132-0cff-0310-8789-dd5450dbe970
* Added code so that a valid credential handle is generated whenKevin Mitchell1997-06-302-3/+75
| | | | | | credentials are delegated. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10106 dc483132-0cff-0310-8789-dd5450dbe970
* accept_sec_context.c (krb5_gss_accept_sec_context): Reorganized errorTheodore Tso1997-06-074-172/+220
| | | | | | | | | | | | | | | | handling code to be more compact (and correct!). If an error occurs while we are doing mutual authentication, send an KRB_ERROR message back to the client, so that it knows what is going on. (This is specified by RFC 1964; we just weren't implementing this previously.) delete_sec_context.c (krb5_gss_delete_sec_context): Check to make sure pointers in the context are non-zero before freeing them. init_sec_context.c (krb5_gss_init_sec_context): If the server sends a KRB_ERROR message, decode it and return an appropriate minor status error code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10094 dc483132-0cff-0310-8789-dd5450dbe970
* Added V2 functions to the glue layerTheodore Tso1997-04-016-17/+74
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10041 dc483132-0cff-0310-8789-dd5450dbe970
* Fix really stupid typoTheodore Tso1997-04-011-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10040 dc483132-0cff-0310-8789-dd5450dbe970
* import_name.c (krb5_gss_import_name): Add support for importing theTheodore Tso1997-03-283-6/+64
| | | | | | | | | exported name call export_name.c (gss_export_name): Fix export_name emit the token exactly as specified by RFC 2078. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10038 dc483132-0cff-0310-8789-dd5450dbe970
* Added definition for the generic gsspi OID type "gss_nt_exported_name"Theodore Tso1997-03-283-0/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10036 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Add canon_name.c, duplicate_name.c, export_name.c to theTheodore Tso1997-03-286-0/+213
| | | | | | | | | | | | | | | GSSAPI library. gssapiP_krb5.h (KG_IMPLFLAGS): Add support for GSS_C_PROT_READY_FLAG and GSS_C_TRANS_FLAG canon_name.c (gss_canonicalize_name): New GSSAPI V2 function duplicate_name.c (gss_duplicate_name): New GSSAPI V2 function export_name.c (gss_export_name): New GSSAPI V2 function git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10031 dc483132-0cff-0310-8789-dd5450dbe970
* Add the GSS_C_PROT_READY_FLAG and GSS_C_TRANS_FLAGTheodore Tso1997-03-282-0/+30
| | | | | | | Add prototypes for the V2 functions gss_export_name(), gss_duplicate_name(), and gss_canonicalize_name(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10030 dc483132-0cff-0310-8789-dd5450dbe970
* A zero-length token should be treated like a GSS_C_NO_BUFFER duringTheodore Tso1997-03-252-2/+8
| | | | | | the initial context establishment. [krb5-libs/352] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10026 dc483132-0cff-0310-8789-dd5450dbe970
* Fix typo (remove '#' from '#extern "C"')Theodore Tso1997-03-241-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10021 dc483132-0cff-0310-8789-dd5450dbe970
* Add 'extern "C"' for C++ compatibility; also check for __cplusplusTheodore Tso1997-03-182-1/+15
| | | | | | since some C++ compilers don't set __STDC__ git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10008 dc483132-0cff-0310-8789-dd5450dbe970
* Fix header file so that winmac.h is #included when commpiling on theTheodore Tso1997-03-172-1/+6
| | | | | | Macintosh. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10005 dc483132-0cff-0310-8789-dd5450dbe970
* Moved some of the library list file build logic from the individual MakefilesRichard Basch1997-02-234-20/+23
| | | | | | to config/win-post.in git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9964 dc483132-0cff-0310-8789-dd5450dbe970
* * Make shared libs work on AIXSam Hartman1997-02-222-3/+7
| | | | | | * Fix dependencies for library git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9952 dc483132-0cff-0310-8789-dd5450dbe970
* Removed unneeded call to krb5_init_etsRichard Basch1997-02-201-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9927 dc483132-0cff-0310-8789-dd5450dbe970