gss-proxy.git/proxy/src/mechglue, branch getenv

Use secure_getenv in client and mechglue module

2013-11-20T17:03:29+00:00

proxymehc.so may be used in setuid binaries so follow best security
practices and use secure_getenv() if available.
Fallback to poorman emulation when secure_getenv() is not available.

Resolves: https://fedorahosted.org/gss-proxy/ticket/110

Fix LOCAL_FIRST behavior

2013-10-18T12:34:46+00:00

We were erroneously returning and never falling back if LOCAL_FIRST was
selected. Correct also the remote first fallback flow.

Resolves: https://fedorahosted.org/gss-proxy/ticket/105

Reviewed-by: Günther Deschner

Coverity fixes.

2013-06-27T16:07:23+00:00

Fix a 4 coverity issues, ranging from memory leaks, to uninitialized
variables, to potential NULL derefernce.
Also a TOCTOU report that is in one of the accessory test scripts.
The bug itself is not reallya TOCTOU, but the check done in the script is
unecessary, so I just removed it.

Signed-off-by: Simo Sorce 
Reviewed-by: Günther Deschner

Disable gss_export_name_composite() for now.

2013-05-16T10:11:42+00:00

We first need to fix our tests and implementation.

Temporary workaround for:
https://fedorahosted.org/gss-proxy/ticket/81

Signed-off-by: Günther Deschner 
Reviewed-by: Simo Sorce

Neutralize gssi_export_name.

2013-05-16T10:04:23+00:00

We do not want to generate an exported name buffer.
Let's the mechglue code in MIT generate it for use from the display name.

Signed-off-by: Simo Sorce 
Reviewed-by: Günther Deschner

Fix typo in gssi_import_name_by_mech().

2013-05-15T11:34:46+00:00

Signed-off-by: Günther Deschner 
Reviewed-by: Simo Sorce

Add --with-gpp-default-behavior configure switch.

2013-05-15T11:34:45+00:00

Only LOCAL_ONLY,LOCAL_FIRST and REMOTE_FIRST allowed.
REMOTE_ONLY is recognized but configure aborts as long as it is not supported.

Signed-off-by: Günther Deschner 
Reviewed-by: Simo Sorce

Use gp_boolean_is_true from interposer plugin's GSS_USE_PROXY check.

2013-04-26T12:58:22+00:00

Signed-off-by: Günther Deschner 
Reviewed-by: Simo Sorce

Import names as remote name by default.

2013-04-10T13:08:52+00:00

Always use remote name by default, otherwise canonicalization will loose
information about the original name, for example it will convert names of
the special type GSS_C_NT_STRING_UID_NAME or GSS_NT_MACHINE_UID_NAME in a
non reversible way and the proxy will not be a le to use them as intended
(for impersonation by trusted services).

Signed-off-by: Simo Sorce 
Reviewed-by: Günther Deschner

Remove unused variables

2013-04-04T02:51:36+00:00

Signed-off-by: Simo Sorce