| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
structure. [krb5-libs/370]
* accept_sec_context.c (krb5_gss_accept_sec_context): Actually set
an rcache in auth context from the one saved in the creds
structure. [krb5-libs/370]
* acquire_cred.c (acquire_accept_cred): Set up an rcache for use
later. [krb5-libs/370]
* delete_sec_context.c (krb5_gss_delete_sec_context): Don't delete
the rcache when freeing the auth_context. [krb5-libs/370]
* rel_cred.c (krb5_gss_release_cred): Properly close the
rcache. [krb5-libs/370]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10371 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
val_cred.$(OBJEXT) for windows building.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10343 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
from credential cache when finished.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10330 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
init_sec_context.c (krb5_gss_init_sec_context),
inq_cred.c (krb5_gss_inquire_cred): Call krb5_gss_validate_cred
to make sure the credential handle is still valid.
* val_cred.c (krb5_gss_validate_cred): New file which validates
the credential to make sure it is valid, including
checking to make sure the credentials cache still points
at the same krb5 principal as it did before.
* accept_sec_context.c (krb5_gss_accept_sec_context): Return
GSS_S_FAILURE if a non-NULL context handle is passed to it.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10285 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10284 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10283 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
(see ChangeLogs for details)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10199 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
value for the host-based service name and the exported name OID to the
list of OID's supported by this mechanism.
import_name.c (krb5_gss_import_name): Add support for the new OID
value for the host-based service name.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10141 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
without being set in failure cases
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10123 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
release the OID without smashing memory passed in by the application.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10117 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
credentials are delegated.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10106 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
handling code to be more compact (and correct!). If an error occurs
while we are doing mutual authentication, send an KRB_ERROR message
back to the client, so that it knows what is going on. (This is
specified by RFC 1964; we just weren't implementing this previously.)
delete_sec_context.c (krb5_gss_delete_sec_context): Check to make sure
pointers in the context are non-zero before freeing them.
init_sec_context.c (krb5_gss_init_sec_context): If the server sends a
KRB_ERROR message, decode it and return an appropriate minor status
error code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10094 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10041 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10040 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
exported name call
export_name.c (gss_export_name): Fix export_name emit the token
exactly as specified by RFC 2078.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10038 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
GSSAPI library.
gssapiP_krb5.h (KG_IMPLFLAGS): Add support for GSS_C_PROT_READY_FLAG
and GSS_C_TRANS_FLAG
canon_name.c (gss_canonicalize_name): New GSSAPI V2 function
duplicate_name.c (gss_duplicate_name): New GSSAPI V2 function
export_name.c (gss_export_name): New GSSAPI V2 function
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10031 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
the initial context establishment. [krb5-libs/352]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10026 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
to config/win-post.in
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9964 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9927 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9910 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9831 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
cryptosystem structures of the krb5_encrypt_block structure
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9798 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9788 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
include the doc subtree!!)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9632 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
instead of scanning through keytab to find matching principal
[krb5-libs/210]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9601 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
kg_oid_size): Add a GSSAPI OID magic number to the externalized OID,
so that if the OID is skipped, (it is optional), the serialization
code can resyncronize if necessary.
(kg_queue_internalize, kg_queue_externalize, kg_queue_size): New functions
to externalize the gssapi queue.
(kg_ctx_size, kg_ctx_exteranlize, kg_ctx_import): Changed to include
the mech_used field and to include the auth context.
gssapi_krb5.c (kg_get_context): Add calls to correctly initialize the
serializers needed by import and export sec context.
delete_sec_context.c (krb5_gss_delete_sec_context): Remember to release the
mech_used OID if necessary!
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9213 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9187 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
error if the ticket endtime is in the past. also, cleaned up
some error cleanup code.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9186 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9159 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
bonehead.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9154 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8998 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8965 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
variable which is pointing to const data.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8896 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
was keeping HDRS from getting set.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8846 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8830 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8827 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
because it was causing line that set OBJS variable to
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8826 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
|
| |
so that if you pass a bad mechanism type, it *will* get flagged as an
error.
rel_oid.c (krb5_gss_release_oid):
krb5_gss_glue.c(gss_release_oid): Re-enable function
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8813 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
before use if GSS_C_NULL_OID_SET.
This was causing random failures in gssftp. I was unlucky enough to hit
that random case where one of the random stack values was zero.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8812 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
accept_sec_context.c (krb5_gss_accept_sec_context):
init_sec_context.c (krb5_gss_init_sec_context): Test (gss_flags &
XXXX) against 0 so that we pass a int value to g_order_init. Needed
since int is 16 bits for Win16 build.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8810 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8790 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8789 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
|
|
| |
OV_MERGE branches. This includes, but is not limited to, the new openvision
admin system, and major changes to gssapi to add functionality, and bring
the implementation in line with rfc1964. before committing, the
code was built and tested for netbsd and solaris.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8774 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8360 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
| |
uses the right Win-32 library command.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8348 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8345 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8308 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
| |
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8288 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
`gss_flags' and updated functions that process it; now get delegation flag
set properly :)
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8275 dc483132-0cff-0310-8789-dd5450dbe970
|
|
|
|
|
|
|
| |
setup krb5_checksum "contents" and "length" field prior to
calling krb5_calculate_checksum().
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@8029 dc483132-0cff-0310-8789-dd5450dbe970
|