summaryrefslogtreecommitdiffstats
path: root/src/lib/gssapi
Commit message (Expand)AuthorAgeFilesLines
...
* Use gss_set_cred_option instead of (undeclared) gssspi_set_cred_optionKen Raeburn2010-10-021-4/+4
* A cleaner impleentation of r24399 which adds two new auth context APIsGreg Hudson2010-10-011-4/+7
* GSSAPI forwarded credentials must be encrypted in session keyGreg Hudson2010-10-011-3/+11
* Use IAKERB OID header for all IAKERB messages including AP-REQLuke Howard2010-09-274-4/+16
* Simplify acquire_accept_cred very slightly, avoiding some long linesGreg Hudson2010-09-271-7/+6
* Add gss_krb5_import_credGreg Hudson2010-09-2713-273/+577
* Make dependGreg Hudson2010-09-083-164/+211
* Allow krb5_gss_register_acceptor_identity to unset keytab nameGreg Hudson2010-08-192-10/+8
* Remove two unused source files in lib/gssapi/genericGreg Hudson2010-08-122-118/+0
* Add correct error table when initializing gss-krb5Greg Hudson2010-06-211-1/+1
* Stop checking the current time against the context expiration time inGreg Hudson2010-06-083-29/+3
* Stop checking the current time against the context expiration time inGreg Hudson2010-06-081-14/+0
* make dependGreg Hudson2010-06-073-264/+270
* make dependGreg Hudson2010-05-281-15/+0
* Apply patch from Arlene Berry to detect and ignore a duplicateTom Yu2010-05-201-0/+12
* In gss_acquire_cred_with_password() and gss_add_cred_with_password(),Greg Hudson2010-05-201-38/+23
* CVE-2010-1321 GSS-API lib null pointer deref (MITKRB5-SA-2010-005)Tom Yu2010-05-191-0/+7
* If gss_inquire_cred is called with a null credential, acquire aGreg Hudson2010-05-171-44/+13
* The mechglue always passes null for desired_mechs and actual_mechsGreg Hudson2010-05-177-244/+30
* The mechglue never invokes a mech's gss_add_cred function. Remove theGreg Hudson2010-05-174-411/+1
* Update dependenciesKen Raeburn2010-05-162-0/+22
* Fix some bugs in the IAKERB code discovered by Coverity. Also trimGreg Hudson2010-05-012-28/+16
* Add IAKERB mechanism and gss_acquire_cred_with_passwordGreg Hudson2010-04-3022-303/+2413
* In kg_new_connection(), make sure k_cred is freed in all failureGreg Hudson2010-04-221-3/+2
* Apply patch from Arlene Berry to cease freeing error tokens output byTom Yu2010-04-221-3/+0
* Amend r23917 to correct some uses of *out_creds which should now useGreg Hudson2010-04-211-3/+2
* In the get_credentials() helper of the gss-krb5 init_sec_context code,Greg Hudson2010-04-211-2/+8
* Apply patch from Arlene Berry to not use freed memory inTom Yu2010-03-231-1/+2
* MITKRB5-SA-2010-002 CVE-2010-0628 denial of service in SPNEGOTom Yu2010-03-231-22/+16
* Release the internal_name field of a SPNEGO context if it has not beenGreg Hudson2010-03-051-0/+3
* Explain the current SPNEGO initiator/acceptor design in comments. NoGreg Hudson2010-02-221-11/+66
* Fix two unrelated problems in SPNEGO which don't crop up with the krb5Greg Hudson2010-02-221-10/+16
* Update dependenciesKen Raeburn2010-02-201-0/+8
* Clarify the SPNEGO NegHints code and plug two cases where half-createdGreg Hudson2010-02-131-25/+19
* Simplify the SPNEGO neg_mechs intersection logic a bit usingGreg Hudson2010-02-121-7/+6
* Implement gss_set_neg_mechsGreg Hudson2010-02-109-81/+301
* Apply patch from Arlene Berry to handle the case where a mechanismTom Yu2010-02-051-2/+10
* Apply patch from Arlene Berry to avoid segfault if a mechTom Yu2010-02-051-0/+5
* Apply patch from Arlene Berry to return a comparable static OID objectTom Yu2010-02-051-0/+3
* define MIN() in lib/gssapi/krb5/prf.cTom Yu2010-01-261-0/+4
* Update dependenciesKen Raeburn2010-01-032-0/+36
* krb5_gss_acquire_cred will deref garbage pointer if actual_mechs is NULLEzra Peisach2010-01-031-3/+5
* Whitespace fixes for new anonymous supportGreg Hudson2009-12-281-1/+2
* Anonymous support for KerberosSam Hartman2009-12-282-2/+18
* Add a set_cred_option handler for SPNEGO which forwards to theGreg Hudson2009-12-212-1/+25
* Fix a cleanup handler in the store_creds code; krb5_cc_close doesn'tGreg Hudson2009-12-171-2/+2
* Add GSS extensions to store credentials, generate random bitsGreg Hudson2009-12-1715-2/+511
* Mark and reindent lib/gssapi, with some exceptionsTom Yu2009-12-0864-312/+312
* ReindentZhanna Tsitkov2009-11-301-35/+26
* Remove the non-iov entry point introduced in r23378, since it's easyGreg Hudson2009-11-291-5/+6