mod_auth_gssapi.git/src, branch name_attrs

Add code to set attribute names in the environment

2015-12-03T18:30:09+00:00

This code allows to specify which attributes in a name are interesting
to the application and set them as named environemnt variables.
Optionally the whole set of attributes can be exported in a json
formatted structure.

Signed-off-by: Simo Sorce 

Close #62
Close #63

Move setting request data to a separate file

2015-12-02T23:34:39+00:00

In preparation for the next commit.

Signed-off-by: Simo Sorce

Negate established flag if session is expired.

2015-10-05T14:23:27+00:00

If the session is expired, then set established to false to
force re-authentication.

Reviewed-by: Simo Sorce 
Close #57

Fix include path to asn1c for out-of-source builds

2015-09-03T17:02:20+00:00

Reviewed-by: Simo Sorce 
Closes #55

Fix bug in handling Session Keys

2015-09-03T16:59:46+00:00

A check inversion in 86661d07812b010b8cf664c2dab596be15ff1e31 caused
the specified session key to be ignored and a crash when none was
specified.

Signed-off-by: Simo Sorce

Allow building without NTLMSSP support

2015-09-03T14:34:56+00:00

If gssapi/gssapi_ntlmssp.h is not available simply disable NTLMSSP.

Coauthored

Signed-off-by: Dennis Schridde 
Signed-off-by: Simo Sorce 

Closes #52
Closes #53
Closes #54

Do not use /tmp as default for s4u2proxy

2015-08-31T12:44:40+00:00

The /tmp directory can lead to bugs and DoS of the apache process
because any user on the system can block the creation of predictable
file names.

Simply error out if GssapiDelegCcacheDir is not explicitly set.

Signed-off-by: Simo Sorce

Allocate new keys at server startup.

2015-08-30T18:31:44+00:00

This avoids a potential race condition if the first 2 request come in at the
same time. It also avoids issues with forked apapche processes which may end
up with different keys per fork.

Signed-off-by: Simo Sorce

Fix incorrect free() usage

2015-08-30T18:28:32+00:00

This code has been changed to use apr pools for memory allocation, so the
error path is wrong as free() is not called on malloc()ed memory anymore.
Remove the calls to free(), the mempool is clean up by callers.

Signed-off-by: Simo Sorce

Support forward proxy authentication

2015-08-06T23:06:54+00:00

Proxy auth headers are a little different.

Sessions cannot be used as we cannot set a cookie.

Reviewed-by: Simo Sorce