gssapi: credential store extensions (#451)
Implement the GSS-API credential store API extensions defined by MIT here: https://k5wiki.kerberos.org/wiki/Projects/Credential_Store_extensions Note: we kill off gss_acquire_cred_ext() here. This was never a public API, although mechanisms could have implemented it and I briefly used it in my BrowserID prototype mechanism. gss_acquire_cred_ext_from() occupies the place in the dispatch table where gss_acquire_cred_ext() used to, but this structure was never visible outside Heimdal (i.e. it is only used by internal mechanisms); (Mechanisms that need to accept arbitrary key/value dictionaries from applications should now implement gss_acquire_cred_from().)
This commit is contained in:
committed by
Nico Williams
parent
a7d42cdf6b
commit
e0bb9c10ca
@@ -89,7 +89,7 @@ static gssapi_mech_interface_desc spnego_mech = {
|
||||
"spnego",
|
||||
{6, rk_UNCONST("\x2b\x06\x01\x05\x05\x02") },
|
||||
0,
|
||||
_gss_spnego_acquire_cred,
|
||||
NULL, /* gm_acquire_cred */
|
||||
_gss_spnego_release_cred,
|
||||
_gss_spnego_init_sec_context,
|
||||
_gss_spnego_accept_sec_context,
|
||||
@@ -129,7 +129,7 @@ static gssapi_mech_interface_desc spnego_mech = {
|
||||
NULL,
|
||||
_gss_spnego_export_cred,
|
||||
_gss_spnego_import_cred,
|
||||
NULL,
|
||||
_gss_spnego_acquire_cred_from,
|
||||
NULL,
|
||||
NULL,
|
||||
NULL,
|
||||
@@ -147,6 +147,8 @@ static gssapi_mech_interface_desc spnego_mech = {
|
||||
NULL, /* gm_delete_name_attribute */
|
||||
NULL, /* gm_export_name_composite */
|
||||
NULL, /* gm_duplicate_cred */
|
||||
gss_add_cred_from,
|
||||
NULL, /* gm_store_cred_into */
|
||||
NULL /* gm_compat */
|
||||
};
|
||||
|
||||
|
||||
Reference in New Issue
Block a user