samba.git/auth/kerberos, branch master

auth/kerberos: explicitly use allow_warnings=True

2014-04-02T07:03:46+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/kerberos: fix a typo.

2014-03-12T09:13:20+00:00

Guenther

Signed-off-by: Günther Deschner 
Reviewed-by: Andreas Schneider

auth/kerberos: add HAVE_KRB5 guard to fix non-krb5 build after winbindd pac changes

2012-09-22T00:44:07+00:00

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Sat Sep 22 02:44:07 CEST 2012 on sn-devel-104

auth/kerberos: Adjust log level for failed PAC signature verification

2012-09-21T02:49:32+00:00

With winbindd trying to verify the signature of an application provided
PAC, this message can be easily triggered. Adjust the debug level to
avoid filling up the logs.

Signed-off-by: Andrew Bartlett

auth/kerberos: Do not do pointer arithmatic on a void *

2012-07-30T04:25:09+00:00

Found with -Werror=pointer-arith

Andrew Bartlett

auth: Common function for retrieving PAC_LOGIN_INFO from PAC

2012-07-06T10:45:51+00:00

Several functions use the same logic as kerberos_pac_logon_info. Move
kerberos_pac_logon_info to common code and reuse it to remove the code
duplication.

Signed-off-by: Andrew Bartlett

auth-kerberos: avoid crash with MIT krb5 1.10.0 in gss_get_name_attribute()

2012-06-06T16:22:51+00:00

gss_get_name_attribute() can return unintialized pac_display_buffer
and later gss_release_buffer() will crash on attempting to release it.

The fix on MIT krb5 side is in 1.10.1, reported in both Debian and MIT upstream:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658514
http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=7087

We need to initialize variables before using gss_get_name_attribute()

Autobuild-User: Alexander Bokovoy 
Autobuild-Date: Wed Jun  6 18:22:51 CEST 2012 on sn-devel-104

gse: Use the smb_gss_oid_equal wrapper.

2012-05-23T14:51:51+00:00

Signed-off-by: Andreas Schneider

lib/replace: split out GSSAPI from lib/replace/system/kerberos.h into lib/replace/system/gssapi.h

2012-04-24T22:18:32+00:00

With waf build include directories are defined by dependencies specified to subsystems.
Without proper dependency  cannot be found for embedded Heimdal builds
when there are no system-wide gssapi/gssapi.h available.

Split out GSSAPI header includes in a separate replacement header and use that explicitly
where needed.

Autobuild-User: Alexander Bokovoy 
Autobuild-Date: Wed Apr 25 00:18:33 CEST 2012 on sn-devel-104

Make krb5 wrapper library common so they can be used all over

2012-04-23T23:20:38+00:00