gss-proxy.git, branch getenv

Use secure_getenv in client and mechglue module

2013-11-20T17:03:29+00:00

proxymehc.so may be used in setuid binaries so follow best security
practices and use secure_getenv() if available.
Fallback to poorman emulation when secure_getenv() is not available.

Resolves: https://fedorahosted.org/gss-proxy/ticket/110

creds: Allow admins to define only client creds

2013-11-16T23:54:28+00:00

When a service is configured with cred_usage = initiate it is
ok to allow only client credentials to be defined.

config: Do not modify const strings

2013-11-16T22:28:35+00:00

Take a copy here, the option string is const and strtok_r() is not a safe
function as it may change the string it manipulates.

Change version to 0.3.0

2013-10-23T17:52:19+00:00

Reviewed-by: Günther Deschner

Add impersonation support

2013-10-23T17:52:13+00:00

By setting the impersonate flag to true, the acquisition of credentials will
be done using constrained delegation (s4uself + s4u2proxy).

To work this needs MIT Kereberos 1.11.4 or later.
Previous versions have a bug in the import_cred function that prevents the
library from properly importing previously exported delegated credentials.

Resolves: https://fedorahosted.org/gss-proxy/ticket/95

Reviewed-by: Günther Deschner

Move uid to name resolution in its own function.

2013-10-23T17:51:49+00:00

Reviewed-by: Günther Deschner

Add man page entry for cred_usage

2013-10-23T13:05:44+00:00

Reviewed-by: Günther Deschner

Add man page entry for allow_any_uid

2013-10-23T13:05:36+00:00

Reviewed-by: Günther Deschner

Add option to specify allowed usage.

2013-10-18T13:46:24+00:00

Credentials can often be used both to accept and to initiate contexts.
With this option admins can allow a specific usage only.
This is to avoid allowing an unprivileged process to fool a remote
client by allowing it to impersonate a server, when we only want to
allow this service to use credentials to initiate contexts.

Reviewed-by: Günther Deschner

Allow arbitrary users to connect to a service

2013-10-18T13:46:24+00:00

The rpc.gssd daemon is changing to fork and change uid to the unprivileged
user it wants to authenticate, this means gssproxy needs to allow connection
from any euid. When this is done though, the trusted flag needs to be dropped,
if the connecting euid does not match the default trusted uid to prevent
improper impersonation.

Resolves: https://fedorahosted.org/gss-proxy/ticket/103
Reviewed-by: Günther Deschner