summaryrefslogtreecommitdiffstats
path: root/src/lib/gssapi/krb5
Commit message (Collapse)AuthorAgeFilesLines
...
* * gssapiP_krb5.h: Add rcache member to the credsTom Yu1998-01-226-2/+46
| | | | | | | | | | | | | | | | | | | structure. [krb5-libs/370] * accept_sec_context.c (krb5_gss_accept_sec_context): Actually set an rcache in auth context from the one saved in the creds structure. [krb5-libs/370] * acquire_cred.c (acquire_accept_cred): Set up an rcache for use later. [krb5-libs/370] * delete_sec_context.c (krb5_gss_delete_sec_context): Don't delete the rcache when freeing the auth_context. [krb5-libs/370] * rel_cred.c (krb5_gss_release_cred): Properly close the rcache. [krb5-libs/370] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10371 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (OBJS): Changed val_cred.$(OBJECT) toEzra Peisach1997-12-292-1/+6
| | | | | | val_cred.$(OBJEXT) for windows building. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10343 dc483132-0cff-0310-8789-dd5450dbe970
* * val_cred.c (krb5_gss_validate_cred): Free principal extractedEzra Peisach1997-12-072-0/+6
| | | | | | from credential cache when finished. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10330 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (krb5_gss_accept_sec_context),Theodore Tso1997-11-167-12/+99
| | | | | | | | | | | | | | | | init_sec_context.c (krb5_gss_init_sec_context), inq_cred.c (krb5_gss_inquire_cred): Call krb5_gss_validate_cred to make sure the credential handle is still valid. * val_cred.c (krb5_gss_validate_cred): New file which validates the credential to make sure it is valid, including checking to make sure the credentials cache still points at the same krb5 principal as it did before. * accept_sec_context.c (krb5_gss_accept_sec_context): Return GSS_S_FAILURE if a non-NULL context handle is passed to it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10285 dc483132-0cff-0310-8789-dd5450dbe970
* (Wrong version of Changelog committed previously)Theodore Tso1997-11-161-1/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10284 dc483132-0cff-0310-8789-dd5450dbe970
* Return GSS_S_FAILURE if a non-NULL context handle is passed to itTheodore Tso1997-11-162-3/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10283 dc483132-0cff-0310-8789-dd5450dbe970
* remove occurences of USE_STRING_H, HAS_STRDUP, and HAS_LABSTom Yu1997-09-193-2/+8
| | | | | | (see ChangeLogs for details) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10199 dc483132-0cff-0310-8789-dd5450dbe970
* inq_names.c (krb5_gss_inquire_names_for_mech): Add the the new OIDTheodore Tso1997-07-303-1/+20
| | | | | | | | | | value for the host-based service name and the exported name OID to the list of OID's supported by this mechanism. import_name.c (krb5_gss_import_name): Add support for the new OID value for the host-based service name. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10141 dc483132-0cff-0310-8789-dd5450dbe970
* (krb5_gss_accept_sec_context): Initialize ctx before it is referenced ↵Ezra Peisach1997-07-222-1/+6
| | | | | | without being set in failure cases git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10123 dc483132-0cff-0310-8789-dd5450dbe970
* Always copy the mechtype so that delete_sec_context() can safelyTheodore Tso1997-07-162-1/+11
| | | | | | release the OID without smashing memory passed in by the application. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10117 dc483132-0cff-0310-8789-dd5450dbe970
* Added code so that a valid credential handle is generated whenKevin Mitchell1997-06-302-3/+75
| | | | | | credentials are delegated. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10106 dc483132-0cff-0310-8789-dd5450dbe970
* accept_sec_context.c (krb5_gss_accept_sec_context): Reorganized errorTheodore Tso1997-06-074-172/+220
| | | | | | | | | | | | | | | | handling code to be more compact (and correct!). If an error occurs while we are doing mutual authentication, send an KRB_ERROR message back to the client, so that it knows what is going on. (This is specified by RFC 1964; we just weren't implementing this previously.) delete_sec_context.c (krb5_gss_delete_sec_context): Check to make sure pointers in the context are non-zero before freeing them. init_sec_context.c (krb5_gss_init_sec_context): If the server sends a KRB_ERROR message, decode it and return an appropriate minor status error code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10094 dc483132-0cff-0310-8789-dd5450dbe970
* Added V2 functions to the glue layerTheodore Tso1997-04-016-17/+74
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10041 dc483132-0cff-0310-8789-dd5450dbe970
* Fix really stupid typoTheodore Tso1997-04-011-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10040 dc483132-0cff-0310-8789-dd5450dbe970
* import_name.c (krb5_gss_import_name): Add support for importing theTheodore Tso1997-03-283-6/+64
| | | | | | | | | exported name call export_name.c (gss_export_name): Fix export_name emit the token exactly as specified by RFC 2078. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10038 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Add canon_name.c, duplicate_name.c, export_name.c to theTheodore Tso1997-03-286-0/+213
| | | | | | | | | | | | | | | GSSAPI library. gssapiP_krb5.h (KG_IMPLFLAGS): Add support for GSS_C_PROT_READY_FLAG and GSS_C_TRANS_FLAG canon_name.c (gss_canonicalize_name): New GSSAPI V2 function duplicate_name.c (gss_duplicate_name): New GSSAPI V2 function export_name.c (gss_export_name): New GSSAPI V2 function git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10031 dc483132-0cff-0310-8789-dd5450dbe970
* A zero-length token should be treated like a GSS_C_NO_BUFFER duringTheodore Tso1997-03-252-2/+8
| | | | | | the initial context establishment. [krb5-libs/352] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10026 dc483132-0cff-0310-8789-dd5450dbe970
* Moved some of the library list file build logic from the individual MakefilesRichard Basch1997-02-232-9/+11
| | | | | | to config/win-post.in git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9964 dc483132-0cff-0310-8789-dd5450dbe970
* Removed unneeded call to krb5_init_etsRichard Basch1997-02-201-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9927 dc483132-0cff-0310-8789-dd5450dbe970
* Replace instances of krb5_xfree..Richard Basch1997-02-192-5/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9910 dc483132-0cff-0310-8789-dd5450dbe970
* Merge of libhack_branchTom Yu1997-02-093-21/+51
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9831 dc483132-0cff-0310-8789-dd5450dbe970
* util_crypt.c: Include k5-int.h because we need to access the privateRichard Basch1997-02-062-1/+7
| | | | | | cryptosystem structures of the krb5_encrypt_block structure git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9798 dc483132-0cff-0310-8789-dd5450dbe970
* Windows/NT integration (V1_0_WIN32_BRANCH merge)Richard Basch1997-02-066-154/+167
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9788 dc483132-0cff-0310-8789-dd5450dbe970
* Merge V1_0_FREEZE_3 into the mainline. (Note this merge does *not*Theodore Tso1996-12-136-45/+96
| | | | | | include the doc subtree!!) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9632 dc483132-0cff-0310-8789-dd5450dbe970
* * acquire_cred.c (acquire_accept_cred): use krb5_kt_get_entryBarry Jaspan1996-12-042-36/+14
| | | | | | | instead of scanning through keytab to find matching principal [krb5-libs/210] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9601 dc483132-0cff-0310-8789-dd5450dbe970
* ser_sctx.c (kg_oid_externalize, kg_oid_internalize,Theodore Tso1996-10-195-12/+183
| | | | | | | | | | | | | | | | | | kg_oid_size): Add a GSSAPI OID magic number to the externalized OID, so that if the OID is skipped, (it is optional), the serialization code can resyncronize if necessary. (kg_queue_internalize, kg_queue_externalize, kg_queue_size): New functions to externalize the gssapi queue. (kg_ctx_size, kg_ctx_exteranlize, kg_ctx_import): Changed to include the mech_used field and to include the auth context. gssapi_krb5.c (kg_get_context): Add calls to correctly initialize the serializers needed by import and export sec context. delete_sec_context.c (krb5_gss_delete_sec_context): Remember to release the mech_used OID if necessary! git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9213 dc483132-0cff-0310-8789-dd5450dbe970
* *** empty log message ***Marc Horowitz1996-10-161-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9187 dc483132-0cff-0310-8789-dd5450dbe970
* * accept_sec_context.c (krb5_gss_accept_sec_context): return anMarc Horowitz1996-10-161-21/+37
| | | | | | | error if the ticket endtime is in the past. also, cleaned up some error cleanup code. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9186 dc483132-0cff-0310-8789-dd5450dbe970
* Don't let the "timeleft" returned by krb5_gss_acquire_cred be negative!Theodore Tso1996-10-102-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9159 dc483132-0cff-0310-8789-dd5450dbe970
* Definition of gss_nt_krb5_name was incorrect; someone was being aTheodore Tso1996-10-092-1/+6
| | | | | | bonehead. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9154 dc483132-0cff-0310-8789-dd5450dbe970
* Fix stupid bug; don't free buf before it's allocated!Theodore Tso1996-08-282-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8998 dc483132-0cff-0310-8789-dd5450dbe970
* * Require DES-CBC-CRC. This works alwaysSam Hartman1996-08-222-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8965 dc483132-0cff-0310-8789-dd5450dbe970
* * acquire_cred.c (krb5_gss_acquire_cred): Add const to localEzra Peisach1996-08-022-1/+7
| | | | | | variable which is pointing to const data. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8896 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (OBJS): Remove trailing backslash on a comment; itTom Yu1996-07-262-1/+6
| | | | | | was keeping HDRS from getting set. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8846 dc483132-0cff-0310-8789-dd5450dbe970
* Add AC_PROG_INSTALL, since it's needed for a "make install"Theodore Tso1996-07-262-0/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8830 dc483132-0cff-0310-8789-dd5450dbe970
* restore old version (oops checked in debugging versTom Yu1996-07-261-3/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8827 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: remove trailing backslash from comment under SRCSTom Yu1996-07-263-1/+10
| | | | | | because it was causing line that set OBJS variable to git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8826 dc483132-0cff-0310-8789-dd5450dbe970
* init_sec_context.c (krb5_gss_init_sec_context): Fixed error checkingTheodore Tso1996-07-255-22/+31
| | | | | | | | | | so that if you pass a bad mechanism type, it *will* get flagged as an error. rel_oid.c (krb5_gss_release_oid): krb5_gss_glue.c(gss_release_oid): Re-enable function git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8813 dc483132-0cff-0310-8789-dd5450dbe970
* * acquire_cred.c (krb5_gss_acquire_cred): Initialize variableEzra Peisach1996-07-252-0/+7
| | | | | | | | | before use if GSS_C_NULL_OID_SET. This was causing random failures in gssftp. I was unlucky enough to hit that random case where one of the random stack values was zero. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8812 dc483132-0cff-0310-8789-dd5450dbe970
* ser_sctx.c (kg_oid_externalize): Add proper return codeTheodore Tso1996-07-254-6/+16
| | | | | | | | | accept_sec_context.c (krb5_gss_accept_sec_context): init_sec_context.c (krb5_gss_init_sec_context): Test (gss_flags & XXXX) against 0 so that we pass a int value to g_order_init. Needed since int is 16 bits for Win16 build. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8810 dc483132-0cff-0310-8789-dd5450dbe970
* Fix broken Windows commands to copy gssapi_krb5.h to include/gssapiTheodore Tso1996-07-242-1/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8790 dc483132-0cff-0310-8789-dd5450dbe970
* Must include k5-int.h on Windows and Macintosh buildsTheodore Tso1996-07-242-0/+9
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8789 dc483132-0cff-0310-8789-dd5450dbe970
* this commit includes all the changes on the OV_9510_INTEGRATION andMarc Horowitz1996-07-2240-1003/+2032
| | | | | | | | | OV_MERGE branches. This includes, but is not limited to, the new openvision admin system, and major changes to gssapi to add functionality, and bring the implementation in line with rfc1964. before committing, the code was built and tested for netbsd and solaris. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8774 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: remove ref to ET_RULESTom Yu1996-06-142-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8360 dc483132-0cff-0310-8789-dd5450dbe970
* Makefile.in: Update special rule for gssapi_err_krb5.obj so that itTheodore Tso1996-06-132-5/+5
| | | | | | uses the right Win-32 library command. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8348 dc483132-0cff-0310-8789-dd5450dbe970
* Checked in missing _WIN32 #ifdefTheodore Tso1996-06-131-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8345 dc483132-0cff-0310-8789-dd5450dbe970
* Add #ifdef _WIN32 in places where we had #ifdef _MSDOSTheodore Tso1996-06-122-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8308 dc483132-0cff-0310-8789-dd5450dbe970
* cvsignore hackeryTom Yu1996-06-101-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8288 dc483132-0cff-0310-8789-dd5450dbe970
* Changed `mutual' element of struct _krb5_gss_ctx_id_rec into more generalKevin Mitchell1996-06-076-12/+21
| | | | | | | `gss_flags' and updated functions that process it; now get delegation flag set properly :) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8275 dc483132-0cff-0310-8789-dd5450dbe970
* * k5seal.c k5unseal.c util_cksum.c:Richard Basch1996-05-154-11/+14
| | | | | | | setup krb5_checksum "contents" and "length" field prior to calling krb5_calculate_checksum(). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8029 dc483132-0cff-0310-8789-dd5450dbe970