krb5.git/src/lib/krb5/libkrb5.exports, branch proxymech MIT Kerberos patches Move a bunch of stuff out of k5-int.h 2013-03-24T05:28:13+00:00 Greg Hudson ghudson@mit.edu 2013-03-24T05:28:13+00:00 6c8fed1bb850b92d471b0741a452bb56354fc0e9 Move internal declarations from k5-int.h to more localized headers (like int-proto.h) where appropriate. Rename many symbols whose prototypes were moved to use the k5_ prefix instead of krb5int_. Remove some unused declarations or move them to the single source file they were needed in. Remove krb5_creds_compare since it isn't used any more. 
Move internal declarations from k5-int.h to more localized headers
(like int-proto.h) where appropriate.  Rename many symbols whose
prototypes were moved to use the k5_ prefix instead of krb5int_.
Remove some unused declarations or move them to the single source file
they were needed in.  Remove krb5_creds_compare since it isn't used
any more.
Get rid of krb5_{get,free}_krbhst 2013-03-22T20:00:48+00:00 Greg Hudson ghudson@mit.edu 2013-03-22T20:00:48+00:00 81fde7e475b02986c1aff88766cc48882004d5dc These functions were always internal. They haven't been used since v5passwdd was eliminated in krb5 1.4. 
These functions were always internal.  They haven't been used since
v5passwdd was eliminated in krb5 1.4.
Get rid of osconfig.c 2013-03-22T18:39:18+00:00 Greg Hudson ghudson@mit.edu 2013-03-22T16:59:48+00:00 ee2044f38503edd2fdb8df9f3398784f747910fb These variables were marked as internal in 1996. Two are unused and the other is easily replaced with the macro it is initialized from. 
These variables were marked as internal in 1996.  Two are unused and
the other is easily replaced with the macro it is initialized from.
Add krb5_free_enctypes API 2013-02-27T22:29:16+00:00 Greg Hudson ghudson@mit.edu 2013-02-27T22:29:16+00:00 8df7b929c3ee272e8255d57720c3e299ebccd198 Rename krb5_free_ktypes to krb5_free_enctypes and add it to the public API. ticket: 7584 
Rename krb5_free_ktypes to krb5_free_enctypes and add it to the public
API.

ticket: 7584
Rename internal preauth functions 2012-12-19T19:24:23+00:00 Greg Hudson ghudson@mit.edu 2012-10-27T19:29:48+00:00 f730fddc59265ee1621ec39f847ea047116a2127 The preauth functions are internal to libkrb5, so use the k5_ prefix, don't use KRB5_CALLCONV, and prototype them in int-proto.h. Also remove krb5_do_preauth from the Unix libkrb5 export list. Reorder the k5_preauth() and k5_preauth_tryagain() arguments for more consistency with the clpreauth interface, and put the output padata arguments at the end. Rename any remaining uses of "kcontext" to "context" in preauth2.c. 
The preauth functions are internal to libkrb5, so use the k5_ prefix,
don't use KRB5_CALLCONV, and prototype them in int-proto.h.  Also
remove krb5_do_preauth from the Unix libkrb5 export list.

Reorder the k5_preauth() and k5_preauth_tryagain() arguments for more
consistency with the clpreauth interface, and put the output padata
arguments at the end.

Rename any remaining uses of "kcontext" to "context" in preauth2.c.
Test in_ccache and pa_types functionality 2012-10-16T23:22:48+00:00 Nalin Dahyabhai nalin@dahyabhai.net 2012-10-01T22:51:06+00:00 9f19a10466b0e85929babaa256146bf4f75f9125 * Add a krb5int_build_conf_principals() function to allow our get/set code to directly prune out duplicate config entries. * Verify that when we specify a pa_type, it affects whether or not we will use a particular preauth plugin. * Verify that we correctly save the KDC's preauth type number, that we tried to answer, to the out_ccache. 
* Add a krb5int_build_conf_principals() function to allow our get/set
  code to directly prune out duplicate config entries.
* Verify that when we specify a pa_type, it affects whether or not we
  will use a particular preauth plugin.
* Verify that we correctly save the KDC's preauth type number, that we
  tried to answer, to the out_ccache.
Add an input ccache get_init_creds option 2012-10-16T23:22:21+00:00 Nalin Dahyabhai nalin@dahyabhai.net 2012-07-23T19:02:37+00:00 ebb41dbb797d7a922aaca9b3c09a3e05c45b5a72 Add a krb5_get_init_creds_opt_set_in_ccache() function. An input ccache may hold configuration data which the client libraries can use to influence their decisions. ticket: 7413 (new) 
Add a krb5_get_init_creds_opt_set_in_ccache() function.  An input
ccache may hold configuration data which the client libraries can
use to influence their decisions.

ticket: 7413 (new)
Export krb5_cc_move() 2012-10-15T16:00:14+00:00 Nalin Dahyabhai nalin@dahyabhai.net 2012-10-10T22:41:13+00:00 ad5aa12f13aad7ec4cafcffeec4f2e84e56c9c78 






Add responder support to preauth_otp
2012-10-15T15:00:58+00:00

Nathaniel McCallum
npmccallum@redhat.com

2012-10-15T14:49:21+00:00

815da88a734c8a721e94fe0979ee5789b4576d10












Add responder feature for initial cred exchanges
2012-09-11T05:05:07+00:00

Nathaniel McCallum
npmccallum@redhat.com

2012-09-10T21:38:23+00:00

43f507711689a71d3aaec8696721b8c981f8428e

Add new APIs:
* krb5_get_init_creds_opt_set_responder
* krb5_responder_get_challenge
* krb5_responder_list_questions
* krb5_responder_set_answer

If a caller sets a responder, it will be invoked after preauth modules
have had a chance to review their incoming padata but before they produce
outgoing padata.  The responder will be presented a set of questions with
optional challenges.  The responder should then answer all questions it knows
how to handle.  Both the answers and the challenges are printable UTF-8 and
may contain encoded, structured data specific to the question asked.

Add two new callbacks and one optional method to the clpreauth
interface.  The new method (prep_questions) allows modules to ask questions
by setting them in the responder context using one of the new callbacks
(ask_responder_question).  The other new callback (get_responder_answer) is
used by the process method to read the answers to the questions asked.

ticket: 7355 (new)





Add new APIs:
* krb5_get_init_creds_opt_set_responder
* krb5_responder_get_challenge
* krb5_responder_list_questions
* krb5_responder_set_answer

If a caller sets a responder, it will be invoked after preauth modules
have had a chance to review their incoming padata but before they produce
outgoing padata.  The responder will be presented a set of questions with
optional challenges.  The responder should then answer all questions it knows
how to handle.  Both the answers and the challenges are printable UTF-8 and
may contain encoded, structured data specific to the question asked.

Add two new callbacks and one optional method to the clpreauth
interface.  The new method (prep_questions) allows modules to ask questions
by setting them in the responder context using one of the new callbacks
(ask_responder_question).  The other new callback (get_responder_answer) is
used by the process method to read the answers to the questions asked.

ticket: 7355 (new)