summaryrefslogtreecommitdiffstats
path: root/proxy/src
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove Fixme commentGünther Deschner2012-07-061-21/+0
| | | | | | We solved the cred import/export problem we had. Signed-off-by: Simo Sorce <simo@redhat.com>
* Remove unused gp_credential_handle conversion fnsGünther Deschner2012-07-061-34/+0
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Use gp_encrypt_buffer and gp_decrypt_buffer.Günther Deschner2012-07-061-4/+6
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add encryption/decryption routinesGünther Deschner2012-07-061-0/+106
| | | | | | Use krb5 functions to AES encrypt/decrypt a buffer. Signed-off-by: Simo Sorce <simo@redhat.com>
* Unify find credsSimo Sorce2012-07-061-19/+20
|
* Fix return status for release handle function.Simo Sorce2012-07-061-2/+2
| | | | We were returning random values allocated on the stack in case of success.
* Use gp_find_and_free_cred() in gp_release_handle().Günther Deschner2012-06-251-4/+1
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Add gp_find_and_free_cred().Günther Deschner2012-06-252-0/+30
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Add free_config() and call it when server shuts down.Günther Deschner2012-06-253-0/+27
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Finally use ring buffer in import and export calls.Günther Deschner2012-06-251-8/+84
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Make gp_import_gssx_cred() static, it is not used outside this file.Günther Deschner2012-06-252-2/+1
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Pass down struct gp_service to import and export credential calls.Günther Deschner2012-06-256-7/+15
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Allow to set per service ring buffer, with configurable size.Günther Deschner2012-06-251-0/+45
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Set pointer to one of the existing ring buffers in service loading.Günther Deschner2012-06-251-0/+8
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Add gp_service_get_ring_buffer to retrieve buffer from a service.Günther Deschner2012-06-252-0/+5
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Add gp_ring_buffer pointer to struct gp_service.Günther Deschner2012-06-251-0/+4
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Add gp_read_gss_creds_from_ring_buffer/gp_write_gss_creds_to_ring_buffer.Günther Deschner2012-06-251-0/+93
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Add two ring_buffers to gp_config struct.Günther Deschner2012-06-252-0/+36
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Add gp_init_ring_buffer/gp_free_ring_buffer.Günther Deschner2012-06-252-1/+143
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Mention socket filename in debug output in init_unix_socket().Günther Deschner2012-06-211-1/+2
| | | | Guenther
* Fix option_is_set() function.Günther Deschner2012-06-211-1/+1
| | | | Guenther
* use option_is_set() config parser helper.Günther Deschner2012-05-311-7/+2
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix popt usage message for -d option.Günther Deschner2012-05-311-1/+1
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* add option_is_set() helper function for config parsing.Günther Deschner2012-05-311-0/+12
| | | | | | Guenther Signed-off-by: Simo Sorce <simo@redhat.com>
* Replace direct syslog calls with logging macrosSimo Sorce2012-04-154-23/+15
|
* Add logging helpersSimo Sorce2012-04-154-4/+71
|
* Add some socket debuggingSimo Sorce2012-04-151-1/+14
|
* gp_export: Add facility to export creds as gssx optionsSimo Sorce2012-04-153-0/+268
| | | | Add Initial test implementation of the Linux Kernel NFS creds structure.
* Change accept/init_sec_context to use the new export context functionsSimo Sorce2012-04-153-13/+23
|
* Add support for linux kernel lucid ctx buffer formatSimo Sorce2012-04-151-11/+130
|
* Move ctx_id function and add export type optionSimo Sorce2012-04-154-107/+152
| | | | | Move the function to export a context to gssx_ctx or import into gp_export.c Add function to check for exported_context_type option in call_ctx
* Use gp_add_krb5_creds until cred store extensions are available.Simo Sorce2012-04-152-35/+88
|
* creds: add code to import krb5 credentials based on configuration.Simo Sorce2012-04-0515-15/+433
|
* Depend on UCRED, we cannot work otherwise.Simo Sorce2012-04-051-4/+0
|
* config: Rework configuration syntaxSimo Sorce2012-04-052-139/+77
| | | | | | | Keeping 2 separate sections for credentials and services seem to just make things really confusing. The off chance of reusing a 'credential' section is dwarfed by the confusion cause by keeping them separate. Having to copy a full service section is not a big deal so KISS wins here.
* Debug: Add debugging macro and config optionsSimo Sorce2012-04-025-0/+38
| | | | Ticket #43
* Avoid double free on error.Simo Sorce2012-04-021-10/+0
| | | | | There is no need to expliciltly free here, as gp_rpc_process_call already always frees the res structure. By doing this we cause double frees on errors.
* conv: Fix typo causing bad output.Simo Sorce2012-03-221-1/+1
|
* gp_socket: properly handle fagment bitSimo Sorce2012-03-222-2/+20
|
* gp_socket: Optimize sending data with writevSimo Sorce2012-03-221-21/+22
| | | | | | Turns out the Linux kernel expects to get the whole reply in a single operation. This optimizes the code to call one less syscall and makes it also more compact. So let's please the kernel and get better code in place.
* Add option to request (or not) delegated credentials backSimo Sorce2012-03-221-2/+7
|
* gp_conv: Fix conversion functions after change to gss_proxy.xSimo Sorce2012-03-211-8/+2
|
* config: parse credential/service config sectionsSimo Sorce2012-02-232-0/+277
|
* gp_conv: use maj/min err codes with gp_conv_ctx_id_to_gssx tooSimo Sorce2012-02-234-17/+18
|
* server: better handle return statusSimo Sorce2012-02-2310-124/+181
| | | | Ticket #33
* Tidyup gp_accept_sec_context()Simo Sorce2012-02-231-5/+2
|
* workers: Fix handling of workers query handlingSimo Sorce2012-02-231-15/+13
| | | | | | Chekcing for query == NULL outside of the mutex was wrong as it may make us end up restarting operation on the value of q we just handed back as if it was a new query. We just need to always go through the conditional lock.
* Implement init_sec_context mechglue functionSimo Sorce2012-02-092-0/+185
|
* Implement server side init_sec_context function.Simo Sorce2012-02-092-4/+139
|
* gp_conv: Add function to import sec contextSimo Sorce2012-02-092-0/+17
|