Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Allow arbitrary users to connect to a service | Simo Sorce | 2013-10-18 | 1 | -7/+6 |
| | | | | | | | | | | | The rpc.gssd daemon is changing to fork and change uid to the unprivileged user it wants to authenticate, this means gssproxy needs to allow connection from any euid. When this is done though, the trusted flag needs to be dropped, if the connecting euid does not match the default trusted uid to prevent improper impersonation. Resolves: https://fedorahosted.org/gss-proxy/ticket/103 Reviewed-by: Günther Deschner <gdeschner@redhat.com | ||||
* | Further improve debugging, mention servicename, socket and euid. | Günther Deschner | 2013-06-24 | 1 | -1/+4 |
| | | | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com> | ||||
* | Add debug statement when gp_rpc_execute is called. | Günther Deschner | 2013-03-14 | 1 | -17/+61 |
| | | | | | | Add code to print the name of tehe GSSX function being executed. Signed-off-by: Simo Sorce <simo@redhat.com> | ||||
* | Implement gp_wrap_size_limit(). | Günther Deschner | 2012-08-31 | 1 | -5/+0 |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | ||||
* | Implement gp_unwrap(). | Günther Deschner | 2012-08-31 | 1 | -4/+0 |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | ||||
* | Implement gp_wrap(). | Günther Deschner | 2012-08-31 | 1 | -4/+0 |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | ||||
* | Implement gp_verify_mic(). | Günther Deschner | 2012-08-23 | 1 | -5/+1 |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | ||||
* | Implement gp_get_mic(). | Günther Deschner | 2012-08-23 | 1 | -4/+0 |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | ||||
* | creds: add code to import krb5 credentials based on configuration. | Simo Sorce | 2012-04-05 | 1 | -3/+5 |
| | |||||
* | Implement server side init_sec_context function. | Simo Sorce | 2012-02-09 | 1 | -4/+0 |
| | |||||
* | Implement server side import_and_canon_name() | Simo Sorce | 2012-02-07 | 1 | -4/+0 |
| | | | | | Also fix name conversion functions, to properly handle exporting/importing names. | ||||
* | Add server implementation of gssx_indicate_mechs | Simo Sorce | 2012-02-03 | 1 | -4/+0 |
| | |||||
* | Add server implementation of acquire_cred | Simo Sorce | 2012-02-01 | 1 | -4/+1 |
| | |||||
* | Move some definitions around. | Simo Sorce | 2012-01-29 | 1 | -1/+7 |
| | | | | | Make union arg/res usable elsewhere. Make gp_xdr_set private as gp_rpc_process.c is the only place where it is used. | ||||
* | Add release_handle implementation | Simo Sorce | 2012-01-25 | 1 | -4/+0 |
| | |||||
* | Move includes in gp_rpc_process.h | Simo Sorce | 2012-01-25 | 1 | -4/+0 |
| | | | | This way it is easier to have the right includes in all gp_rpc_* files. | ||||
* | Add accept_sec_context implementation | Simo Sorce | 2012-01-25 | 1 | -4/+1 |
| | |||||
* | Refactor gp_rpc_process | Simo Sorce | 2012-01-25 | 1 | -41/+58 |
| | | | | Remove useless context abstraction for calls and replies. | ||||
* | Add rpc processing infrastructure | Simo Sorce | 2012-01-20 | 1 | -0/+413 |