mod_auth_gssapi.git/src, branch master

Add cleanup function for mag_conn->name_attributes

2017-02-13T10:38:23+00:00

Reviewed-by: Simo Sorce 
Closes #127

JSON strings need to be escaped (i.e. replace " with \")

2017-02-09T09:38:44+00:00

Reviewed-by: Simo Sorce 
Closes #125

Add option to set alternative ccname env var

2017-02-08T12:39:47+00:00

In some cases (e.g. if you want to convey the ccname over AJP) the
request environment variable name "KRB5CCNAME" is not appropriate.
Add the GssapiDelegCcacheEnvVar option that allows the env var name
to be changed.

Fixes: https://github.com/modauthgssapi/mod_auth_gssapi/issues/123

Reviewed-by: Simo Sorce 
Closes #124
Closes #123

rewrite: implicitly handle internal redirects

2017-01-11T19:43:08+00:00

Internal redirects are a special case of subrequest - they
have no req->main but req->prev instead, so we should check
for that too in case the request is not initial.

Also, make sure to export MAG environment variables to
subrequests and internal redirects.

Signed-off-by: Isaac Boukris 
Reviewed-by: Simo Sorce 
Reported-by: scopev24
Closes #119

Add option to store the session encryption key.

2017-01-03T16:42:52+00:00

With the new 'file:' sytnax a session key can be automatically generated
the first time mod_auth_gssapi runs and stored on the filesystem.

Signed-off-by: Simo Sorce 
Reviewed-by: Robbie Harwood 

Closes #117

Fix memory pool used to hold ccache name

2016-12-19T18:56:35+00:00

broken ccache name when "GssapiDelegCcacheUnique Off" (default)

Signed-off-by: Marcel Ritter 
Reviewed-by: Simo Sorce 
Closes #116
Fixes #115

Add option to set custom permissions on ccache

2016-11-30T10:39:33+00:00

This allows apache to set permission so that another user in the default
group can access the ccache. Useful when apache passes the request to a
process running under a different user or group id number.

Signed-off-by: Simo Sorce 
Reviewed-by: Robbie Harwood

Write 'Persistent-Auth' header to err_headers_out

2016-10-11T13:01:23+00:00

In some cases, like internal redirects, authentication is completed but our
'Persistent-Auth' header is dropped by the server because headers_out is ignored
with errors (4xx, 5xx) and internal redirects.

See: https://ci.apache.org/projects/httpd/trunk/doxygen/structrequest__rec.html#a9f49c2d5680987c0c28466ea37d41a62

This fixes #110

Reviewed-by: Simo Sorce 
Reviewed-by: Isaac Boukris 
Closes #111

Declare mag_complete outside the ifdef block

2016-10-11T12:59:32+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Isaac Boukris 
Reviewed-by: Robbie Harwood 
Fixes #106
Closes #107

Fix behavior of NULL ccname for cookie creation

2016-08-15T18:32:45+00:00

This resolves an issue where the session cookie would not be populated
when sesions were used but unique ccaches were not.

Based on a report from Bhagavan Das.

Signed-off-by: Robbie Harwood 
Reviewed-by: Simo Sorce 
Closes #98