Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Implement context related mechglue wrappers | Simo Sorce | 2012-10-25 | 2 | -0/+460 | |
| | | | | | Use the new spi call in order to be able to properly implement a context locally. | |||||
* | Implement cred related mechglue wrappers | Simo Sorce | 2012-10-25 | 3 | -0/+831 | |
| | ||||||
* | Add name handle wrapper | Simo Sorce | 2012-10-25 | 9 | -111/+142 | |
| | ||||||
* | Add context handle wrapper | Simo Sorce | 2012-10-25 | 5 | -12/+17 | |
| | ||||||
* | Add cred handle wrapper | Simo Sorce | 2012-10-25 | 6 | -23/+28 | |
| | ||||||
* | Add function to ease copying oids | Simo Sorce | 2012-10-25 | 2 | -0/+25 | |
| | ||||||
* | Add function to convert remote context to local | Simo Sorce | 2012-10-25 | 2 | -0/+18 | |
| | ||||||
* | Add simple functions to map errors | Simo Sorce | 2012-10-25 | 2 | -0/+26 | |
| | | | | | | | | | | The mechglue stores a map of errors/mech oids, this means that we should never return the same error we got from a mechanism after re-entering the mechglue as we then may get the mechglue confused and prevent us from asking an interposed mech for the error. Also we want to try to aqvoid collisions from errors returned from the proxy, as they could end up fetching errors from the wrong mechanism. For now just make a very simple mapping by always adding a special error base. | |||||
* | Add function to return a special mech | Simo Sorce | 2012-10-25 | 3 | -0/+204 | |
| | | | | | | | | When the interposer wants to call the mechglue and have it call a real mechanism it does so by providing a speecial mechanism oid. This is an oid composed of the procy plugin oid and the real mechanism oid that the mechglue transforms back into a real OID before selecting the appropriate mechanism. | |||||
* | Add mechanism to select behavior based on envvar | Simo Sorce | 2012-10-25 | 2 | -0/+38 | |
| | ||||||
* | Add loop avoidance in proxy daemon and gssapi plugin | Simo Sorce | 2012-10-25 | 2 | -0/+11 | |
| | ||||||
* | Add initialization code | Simo Sorce | 2012-10-25 | 2 | -0/+141 | |
| | | | | | | | For now return fixed list of mechanisms. Later on we can try to fetch this list from the proxy. Also split RPC client code from actual plugin | |||||
* | Implement gpm_wrap_size_limit(). | Günther Deschner | 2012-09-14 | 2 | -0/+91 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Implement gpm_unwrap(). | Günther Deschner | 2012-09-14 | 2 | -0/+130 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Implement gpm_wrap() | Günther Deschner | 2012-09-14 | 2 | -1/+130 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Implement gpm_verify_mic(). | Günther Deschner | 2012-09-14 | 2 | -0/+98 | |
| | ||||||
* | Implement gpm_get_mic(). | Günther Deschner | 2012-09-14 | 2 | -1/+103 | |
| | ||||||
* | Implement gpm_compare_name | Simo Sorce | 2012-09-14 | 2 | -0/+53 | |
| | ||||||
* | Implement gpm_inquire_context | Simo Sorce | 2012-09-14 | 2 | -0/+121 | |
| | ||||||
* | Implement gpm_inquire_cred | Simo Sorce | 2012-09-14 | 2 | -0/+221 | |
| | ||||||
* | Move client lib files in their own directory | Simo Sorce | 2012-08-31 | 10 | -7/+2 | |
| | | | | | | | Make space for the actual mechglue plugin interface. The mechglue interface will use the client library to communicate with the gss-proxy but will reimplement all GSSAPI SPI as wrappers in order to properly handle fallbacks to local mechanism and other input/output transformations. | |||||
* | Add macro to suppress const warnings | Simo Sorce | 2012-08-31 | 1 | -0/+2 | |
| | ||||||
* | Save internal errors in init_sec_context | Simo Sorce | 2012-08-31 | 1 | -0/+2 | |
| | ||||||
* | Add function to report internal client errors | Simo Sorce | 2012-08-31 | 2 | -0/+19 | |
| | | | | | | | This is to allow gss_display_status to return a meaningful error if there is an internal client error as opposed to a returned proxy server error. If we do not do this a call to gpm_display_status() after a failure would return a NULL string and give no clue about the error. | |||||
* | Always return a minor_status | Simo Sorce | 2012-08-31 | 1 | -0/+2 | |
| | ||||||
* | Move release_name to the proper place | Simo Sorce | 2012-08-31 | 2 | -11/+10 | |
| | ||||||
* | Fix gpm_display_status | Simo Sorce | 2012-08-31 | 1 | -19/+13 | |
| | | | | | | | Fix some assumptions in gpm_display_status and make it clearly state no error is available, when we do not have one. This is so that the plugin code later on will know when to properly fall back to ask to the local provider. | |||||
* | Add gpm_inquire_name to client lib | Simo Sorce | 2012-08-31 | 2 | -0/+68 | |
| | ||||||
* | Implement gp_wrap_size_limit(). | Günther Deschner | 2012-08-31 | 2 | -5/+82 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Implement gp_unwrap(). | Günther Deschner | 2012-08-31 | 2 | -4/+138 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Implement gp_wrap(). | Günther Deschner | 2012-08-31 | 2 | -4/+135 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Implement gp_verify_mic(). | Günther Deschner | 2012-08-23 | 3 | -6/+107 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Implement gp_get_mic(). | Günther Deschner | 2012-08-23 | 2 | -4/+104 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Add newlines to debug statements. | Günther Deschner | 2012-08-23 | 1 | -2/+2 | |
| | | | | Acked-by: Simo Sorce <simo@redhat.com> | |||||
* | Fix DEBUG message format | Simo Sorce | 2012-08-06 | 1 | -1/+2 | |
| | ||||||
* | Output type can be null in gss_display_name | Simo Sorce | 2012-08-06 | 1 | -7/+9 | |
| | ||||||
* | memset default input token for init_sec_context | Simo Sorce | 2012-07-26 | 1 | -3/+2 | |
| | ||||||
* | Fix handling deleg_creds in accept_sec_context | Simo Sorce | 2012-07-26 | 1 | -13/+10 | |
| | | | | We would segfault if the user didn't want delegated redentials. | |||||
* | Fix segfaults when NULL buffer is passed in. | Simo Sorce | 2012-07-26 | 2 | -5/+11 | |
| | ||||||
* | Remove Fixme comment | Günther Deschner | 2012-07-06 | 1 | -21/+0 | |
| | | | | | | We solved the cred import/export problem we had. Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Remove unused gp_credential_handle conversion fns | Günther Deschner | 2012-07-06 | 1 | -34/+0 | |
| | | | | Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Use gp_encrypt_buffer and gp_decrypt_buffer. | Günther Deschner | 2012-07-06 | 1 | -4/+6 | |
| | | | | Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Add encryption/decryption routines | Günther Deschner | 2012-07-06 | 1 | -0/+106 | |
| | | | | | | Use krb5 functions to AES encrypt/decrypt a buffer. Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Unify find creds | Simo Sorce | 2012-07-06 | 1 | -19/+20 | |
| | ||||||
* | Fix return status for release handle function. | Simo Sorce | 2012-07-06 | 1 | -2/+2 | |
| | | | | We were returning random values allocated on the stack in case of success. | |||||
* | Use gp_find_and_free_cred() in gp_release_handle(). | Günther Deschner | 2012-06-25 | 1 | -4/+1 | |
| | | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Add gp_find_and_free_cred(). | Günther Deschner | 2012-06-25 | 2 | -0/+30 | |
| | | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Add free_config() and call it when server shuts down. | Günther Deschner | 2012-06-25 | 3 | -0/+27 | |
| | | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Finally use ring buffer in import and export calls. | Günther Deschner | 2012-06-25 | 1 | -8/+84 | |
| | | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com> | |||||
* | Make gp_import_gssx_cred() static, it is not used outside this file. | Günther Deschner | 2012-06-25 | 2 | -2/+1 | |
| | | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com> |