krb5: Improve cccol sub naming; add gss_store_cred_into2()
- Formalize the TYPE:collection_name:subsidiary_name naming scheme for
ccaches in ccache collections
- KEYRING: ccaches are weird because they have one more optional field: the
"anchor", so rather than just assume a naming convention everywhere, we
add new functions as well
- Add krb5_cc_{resolve,default}_sub() that allows one to specify a
"subsidiary" ccache name in a collection separately from the
collection name
- Add krb5_cc_{resolve,default}_for() which take a principal name,
unparse it, and use it as the subsidiary ccache name (with colons
replaced)
- Make kinit use the new interfaces
- Add missing DIR ccache iteration functionality
- Revamps test_cc
- Add krb5_cc_get_collection() and krb5_cc_get_subsidiary()
- Bump the ccops SPI version number
- Add gss_store_cred_into2()
- Make MEMORY:anonymous not linked into the global MEMORY ccache
collection, and uses this for delegated cred handles
TBD:
- Split this up into a krb5 change and gss mech_krb5 change?
- Add krb5_cc_init_and_store() utility, per Greg's suggestion?
This commit is contained in:
@@ -1187,6 +1187,29 @@ gss_store_cred_into(
|
||||
gss_cred_usage_t * /* cred_usage_stored */
|
||||
);
|
||||
|
||||
GSSAPI_LIB_FUNCTION OM_uint32 GSSAPI_LIB_CALL
|
||||
gss_store_cred_into2(
|
||||
OM_uint32 * /* minor_status */,
|
||||
gss_const_cred_id_t /* input_cred_handle */,
|
||||
gss_cred_usage_t /* input_usage */,
|
||||
const gss_OID /* desired_mech */,
|
||||
OM_uint32 /* store_cred_flags */,
|
||||
gss_const_key_value_set_t /* cred_store */,
|
||||
gss_OID_set * /* elements_stored */,
|
||||
gss_cred_usage_t * /* cred_usage_stored */,
|
||||
gss_buffer_set_t * /* env */
|
||||
);
|
||||
|
||||
enum gss_store_cred_flags {
|
||||
GSS_C_STORE_CRED_DEFAULT = 1,
|
||||
GSS_C_STORE_CRED_OVERWRITE = 2,
|
||||
GSS_C_STORE_CRED_SET_PROCESS = 4,
|
||||
};
|
||||
#define GSS_C_STORE_CRED_DEFAULT GSS_C_STORE_CRED_DEFAULT
|
||||
#define GSS_C_STORE_CRED_OVERWRITE GSS_C_STORE_CRED_OVERWRITE
|
||||
#define GSS_C_STORE_CRED_SET_PROCESS GSS_C_STORE_CRED_SET_PROCESS
|
||||
|
||||
|
||||
GSSAPI_LIB_FUNCTION OM_uint32 GSSAPI_CALLCONV
|
||||
gss_set_neg_mechs(
|
||||
OM_uint32 * /* minor_status */,
|
||||
|
||||
Reference in New Issue
Block a user