oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

krb5: krb5_cc_ops backward compatibility and extensibility

Browse Source 
The krb5_cc_ops structure is an extensible structure to which new
functionality has been added over the years.

Version zero was the original.  It included all functions up to
and including get_default_name().

Version one added set_default().

Version two added lastchange().

Version three added set_kdc_offset() and get_kdc_offset().

Version four broke compatibility by modifying the signatures
of get_name() and resolve().   This was in change
7bf4d76e75 ("krb5: Improve cccol sub
naming; add gss_store_cred_into2()").

Version five restores the original signatures of get_name()
and resolve() and introduces get_name_2() and resolve_2() that
provide the additional cccol functionality.

This change

 * introduces version five
 * documents which functions are part of each version
 * replaces KRB5_CC_OPS_VERSION with KRB5_CC_OPS_VERSION_0,
   KRB5_CC_OPS_VERSION_1, KRB5_CC_OPS_VERSION_2, KRB5_CC_OPS_VERSION_3,
   and KRB5_CC_OPS_VERSION_5.  KRB5_CC_OPS_VERSION_4 is skipped
   because of the aforementioned breakage.
 * compatibility logic is added to permit ccache plugins to implement
   any of version one, two, three, five or a future version.
 * all in-tree krb5_cc_ops implementations are updated to version 5.

Change-Id: Iadfce01d10834bc6151939e4d9d196f03001626e
This commit is contained in:
Jeffrey Altman
2020-05-27 22:19:13 -04:00
committed by Nico Williams
parent 33bb2479b9
commit d84512b8d2
10 changed files with 156 additions and 109 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
lib/krb5/krcache.c
View File

@@ -1054,10 +1054,10 @@ make_cache(krb5_context context,
/* Create a keyring ccache handle for the given residual string. */
static krb5_error_code KRB5_CALLCONV
krcc_resolve(krb5_context context,
krb5_ccache *id,
const char *residual,
const char *sub)
krcc_resolve_2(krb5_context context,
krb5_ccache *id,
const char *residual,
const char *sub)
{
krb5_error_code ret;
key_serial_t collection_id, cache_id;
@@ -1346,11 +1346,11 @@ cleanup:
/* Return an alias to the residual string of the cache. */
static krb5_error_code KRB5_CALLCONV
krcc_get_name(krb5_context context,
krb5_ccache id,
const char **name,
const char **collection_name,
const char **subsidiary_name)
krcc_get_name_2(krb5_context context,
krb5_ccache id,
const char **name,
const char **collection_name,
const char **subsidiary_name)
{
krb5_krcache *data = KRCACHE(id);
@@ -2040,10 +2040,10 @@ krcc_get_default_name(krb5_context context, char **str)
* be stored at the process or thread level respectively.
*/
KRB5_LIB_VARIABLE const krb5_cc_ops krb5_krcc_ops = {
KRB5_CC_OPS_VERSION,
KRB5_CC_OPS_VERSION_5,
"KEYRING",
krcc_get_name,
krcc_resolve,
NULL,
NULL,
krcc_gen_new,
krcc_initialize,
krcc_destroy,
@@ -2066,6 +2066,8 @@ KRB5_LIB_VARIABLE const krb5_cc_ops krb5_krcc_ops = {
krcc_lastchange,
krcc_set_kdc_offset,
krcc_get_kdc_offset,
krcc_get_name_2,
krcc_resolve_2
};
#endif /* HAVE_KEYUTILS_H */