summaryrefslogtreecommitdiffstats
path: root/proxy/Makefile.am
Commit message (Collapse)AuthorAgeFilesLines
* Use t_utils.h in all tests.Simo Sorce2015-12-011-0/+2
| | | | | | | Avoid duplicating the same helper functions everywhere. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Robbie Harwoood <rharwood@redhat.com>
* Add higher level debugging for all rpc callsSimo Sorce2015-12-011-0/+1
| | | | | | | Print everything, except octet string buffers which are truncated. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Robbie Harwood <rharwood@redhat.com>
* Fix make cleanSimo Sorce2015-11-301-1/+1
| | | | | | | Clean the generated file not the source file. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Robbie Harwood <rharwood@redhat.com>
* Add HTTP service and move NFS into its own conf fileRobbie Harwood (frozencemetery)2015-09-041-3/+14
| | | | | Signed-off-by: Robbie Harwood <rharwood@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Remove one layer of abstraction over dinglibsRobbie Harwood (frozencemetery)2015-08-311-2/+0
| | | | | | | | A handful of parameter name differences (`key` vs. `keyname`) have been tweaked but the function bodies are otherwise unchanged. Signed-off-by: Robbie Harwood (frozencemetery) <rharwood@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Remove support for iniparse libraryRoland Mainz2015-04-151-2/+0
| | | | | | | | | | This library already does not support some features we need and we want to drop its usage as the code quality is bad. Fixes: https://fedorahosted.org/gss-proxy/ticket/139 Signed-off-by: Roland Mainz <rmainz@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Turn on strict aliasing rulesRoland Mainz2015-04-091-2/+4
| | | | | | | | | | | Remove -fno-strict-aliasing (this is not required because gssproxy is mostly a good ISO C99/C11 citizen) and replace it with -Werror=strict-aliasing to ensure that if *anything* creeps up the build will just fail (this requires in gcc4.x's case the use of -fstrict-aliasing, too). Signed-off-by: Roland Mainz <rmainz@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Fix configuration file substitutionsSimo Sorce2015-03-301-1/+1
| | | | | | | Fixes: https://fedorahosted.org/gss-proxy/ticket/138 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Lukas Slebodnik <lslebodn@redhat.com>
* Fix few build issuesLukas Slebodnik2015-03-241-6/+13
| | | | | | | | | | | - use automake variables for simplification of file installation instead of make install hooks - if configure is not called from $srcdir then few directories were not created. - few files were not removed with make unistall Signed-off-by: Lukas Slebodnik <lslebodn@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Fix variable replacement in non config filesSimo Sorce2015-03-241-5/+33
| | | | | | | Fixes: #132 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Lukas Slebodnik <lslebodn@redhat.com>
* Generalize GSS Display Status logger codeSimo Sorce2015-03-241-0/+1
| | | | | | | This way it can be used both in stderr debugging as well as for sending errors to syslog. Signed-off-by: Simo Sorce <simo@redhat.com>
* BUILD: Fix building with automake 1.15Lukas Slebodnik2015-01-161-2/+0
| | | | | | | | | | | | | | | The macro AC_BUILD_AUX_DIR was used too late. As a result of this automake 1.15 generated configure script which ignored the directory build/ and was not able to find missing files. configure: error: cannot find install-sh, install.sh, or shtool in "." "./.." "./../..". After removing macro AC_BUILD_AUX_DIR, autoreconf will install auxiliary files into $srcdir. Signed-off-by: Lukas Slebodnik <lslebodn@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* BUILD: Change ordering of invoking MakefilesLukas Slebodnik2015-01-151-1/+1
| | | | | | | | | | | | | | Make distcheck failed with error: Makefile:1229: tests/.deps/cli_srv_comm.Po: No such file or directory Makefile:1230: tests/.deps/interposetest.Po: No such file or directory make[2]: *** No rule to make target 'tests/.deps/interposetest.Po'. Stop. make[2]: Leaving directory './gss-proxy/proxy/bdir/gssproxy-0.3.1/_build' Makefile:1528: recipe for target 'distclean-recursive' failed make[1]: *** [distclean-recursive] Error 1 Signed-off-by: Lukas Slebodnik <lslebodn@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* BUILD: Tests did not work from parallel directoryLukas Slebodnik2015-01-151-2/+2
| | | | | | | | | | | | | | | | | | | mkdir build_dir cd build_dir ../configiure make tests ./tests/runtests.py make: ./tests/runtests.py: Command not found Makefile:2010: recipe for target 'tests' failed make: *** [tests] Error 127 make test_proxymech TMPDIR=tests/scripts/ ./tests/scripts/dlopen.sh ./.libs/proxymech.so || exit 1 /bin/sh: ./tests/scripts/dlopen.sh: No such file or directory Makefile:2056: recipe for target 'test_proxymech' failed make: *** [test_proxymech] Error 1 Signed-off-by: Lukas Slebodnik <lslebodn@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add a test framework for gss-proxySimo Sorce2014-09-151-1/+2
| | | | | | | | | | | | This sets up a kdc using socket_wrapper and nss_wrapper from the cwrap project, and uses a dirty hack to force gssapi to load the current proxymech interposer library. It provisions a service and a user key then runs the interpostest binary in this artifical environment. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Guenther Deschner <gdeschner@redhat.com>
* Use secure_getenv in client and mechglue moduleSimo Sorce2013-11-211-3/+4
| | | | | | | | | | proxymehc.so may be used in setuid binaries so follow best security practices and use secure_getenv() if available. Fallback to poorman emulation when secure_getenv() is not available. Resolves: https://fedorahosted.org/gss-proxy/ticket/110 Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Add service match using SeLinux ContextSimo Sorce2013-07-021-0/+1
| | | | | | | | | | | | Using getpeercon we can know the elinux context of the process talking to gssproxy. Use this information as an optional additional filter to match processes to service definitions. If a selinux_context option with a full user;role;type context is specified into a service section, then the connecting process must also be running under the specified selinux context in order to be allowed to connect. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Make sure dlopen.sh is part of the tarballGünther Deschner2013-05-221-1/+1
| | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com>
* Add dlopen script to check for unresolved symbols.Günther Deschner2013-05-151-0/+6
| | | | | | | | Vendors can call "make test_proxymech" from their specfile to make sure proxymech.so can be properly loaded by the GSSAPI. Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Fix unresolved symbol gp_boolean_is_true() in mechglue plugin.Günther Deschner2013-05-151-2/+3
| | | | | | | | At the same time, rename gp_common.c to gp_util.c to make it more visible there is no relation to gp_common.h. Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add --with-gpstate-path=PATH configure switch.Günther Deschner2013-05-061-2/+2
| | | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add support for per-service socketsSimo Sorce2013-04-231-0/+1
| | | | | | | | This way different processes running as the same user can be configured as different servervices Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Improve default configuration.Simo Sorce2013-04-231-1/+0
| | | | | | | | Install by default working nfs configuration. For RPM also install by default file to configure interposer plugin. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Add generic function to get creds defaultsSimo Sorce2013-04-101-4/+5
| | | | | Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Add dinglibs ini configuration detection and backend.Günther Deschner2013-04-081-0/+3
| | | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Abstract configuration layer for gssproxy.Günther Deschner2013-04-081-0/+3
| | | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Use gssrpc instead of system rpcSimo Sorce2013-03-141-1/+1
| | | | | This avoids issues with libraris like libtirpc as gssrpc renames all the symbols to avoid clashes with system libraries.
* Add custom implementation of xdr_uint64_tSimo Sorce2013-03-141-1/+2
| | | | This is needed because gssrpc doesn't have one.
* Add example GSS-API mechanism plugins config file.Günther Deschner2013-01-151-0/+2
| | | | The file is not installed automatically yet.
* Use new gss_import/export_cred functionsSimo Sorce2012-10-251-1/+0
| | | | | | | This allows us to remove the ring_buffer hack and become completely stateless as well as remove a possible DoS avenue. R.I.P. Ring Buffer :-)
* Makefile: Add src/mechglue/gss_plugin.h to header list.Günther Deschner2012-10-251-1/+2
| | | | Acked-by: Simo Sorce <simo@redhat.com>
* New test program to exercise the mechglue pluginSimo Sorce2012-10-251-2/+10
|
* Implement misc spi callsSimo Sorce2012-10-251-0/+1
|
* Implement privacy/integrity mechglue wrappersSimo Sorce2012-10-251-0/+1
|
* Implement indicate mechs related mechglue wrappersSimo Sorce2012-10-251-0/+1
|
* Implement name related mechglue wrappersSimo Sorce2012-10-251-0/+1
|
* Implement display status mechglue wrappersSimo Sorce2012-10-251-0/+1
|
* Implement init sec context mechglue wrapperSimo Sorce2012-10-251-0/+1
|
* Implement accept sec context mechglue wrappersSimo Sorce2012-10-251-0/+1
|
* Implement context related mechglue wrappersSimo Sorce2012-10-251-0/+1
| | | | | Use the new spi call in order to be able to properly implement a context locally.
* Implement cred related mechglue wrappersSimo Sorce2012-10-251-0/+2
|
* Add initialization codeSimo Sorce2012-10-251-2/+5
| | | | | | | For now return fixed list of mechanisms. Later on we can try to fetch this list from the proxy. Also split RPC client code from actual plugin
* Build mechglue as a pluginSimo Sorce2012-10-251-0/+13
|
* Implement gpm_wrap_size_limit().Günther Deschner2012-09-141-0/+1
| | | | Acked-by: Simo Sorce <simo@redhat.com>
* Implement gpm_unwrap().Günther Deschner2012-09-141-0/+1
| | | | Acked-by: Simo Sorce <simo@redhat.com>
* Implement gpm_wrap()Günther Deschner2012-09-141-0/+1
| | | | Acked-by: Simo Sorce <simo@redhat.com>
* Implement gpm_verify_mic().Günther Deschner2012-09-141-0/+1
|
* Implement gpm_get_mic().Günther Deschner2012-09-141-0/+1
|
* Implement gpm_inquire_contextSimo Sorce2012-09-141-0/+1
|
* Move client lib files in their own directorySimo Sorce2012-08-311-9/+9
| | | | | | | Make space for the actual mechglue plugin interface. The mechglue interface will use the client library to communicate with the gss-proxy but will reimplement all GSSAPI SPI as wrappers in order to properly handle fallbacks to local mechanism and other input/output transformations.
generated by cgit (git 2.34.1) at 2025-09-27 12:20:17 +0000