oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
29,115 Commits 2 Branches 2 Tags
2c8fa272240f17e4d9d801abad9710c6c09f63ab
Commit Graph

46 Commits

Author SHA1 Message Date
Luke Howard
2c8fa27224 gss: use _gss_secure_release_buffer_[set] 
Use new helper APIs for securely zeroing and releasing buffers and buffer sets.
 2020-04-15 16:23:17 +10:00
Luke Howard
31af9ba703 gss: use tail queue instead of singly linked list in mechglue 
The GSS mechglue uses singly linked lists for mechanisms and mechanism objects,
to which new entries are inserted at the head. This breaks ordering of
mechanisms specified in OID sets and in /etc/gss/mech, as they will be back to
front. Use a tail queue instead so that new entries are inserted at the end.
 2020-02-04 17:28:35 +11:00
Luke Howard
2242b5bc5b gssapi: gss_krb5_set_allowable_enctypes prototype mismatch 
gss_krb5_set_allowable_enctypes() was declared with an array of int32_t types
representing the enctype list, but the definition had an array of krb5_enctype.
Whilst these are likely the same size, they may not be. On the receiving end,
allocate an array of krb5_enctype.
 2019-01-03 17:54:38 +11:00
Luke Howard
ad426d0385 gssapi: import bugfixes from Apple Heimdal-520 
* check `ctx->gc_ctx` in `gss_inquire_context()`
* check `gm_inquire_cred != NULL` in `gss_inquire_context()`
* check `min_lifetime` in `gss_inquire_cred()`
* check `gm_inquire_cred_by_mech != NULL` in `gss_inquire_cred_by_mech()`
* set mech error in `gss_inquire_cred_by_oid()`
* don't clobber error in `gss_inquire_cred_by_oid()`
* don't pass NULL minor_status to `gss_krb5_free_lucid_sec_context()`
* allow NULL ccache in `gss_krb5_ccache_name()`
* NULL names OK in `_gss_find_mn()`
* allow empty names in `gss_import_name()` (removes `input_name_buffer` length
  check). to support ANONYMOUS.  in `gss_import_name()`, ignore mech name
  import failure as long as it's possible to import the name in some other
  mechanism
* better argument validation in `gss_export_sec_context()`
* in `gss_compare_name()`, check `mn2 != NULL`
* check `gss_add_oid_set_member()` return code in `gss_indicate_mechs()`
* in `gss_destroy_cred()`, set output cred handle to `GSS_C_NO_CREDENTIAL`
* cast size_t to OM_uint32 where required
 2019-01-03 17:53:25 +11:00
Nicolas Williams
7b76d6719f Fix VC warning about enctypes 2019-01-02 13:56:04 -05:00
Luke Howard
4a93c4774a gss: intern OIDs (#447) 
Intern OIDs so that gss_release_oid() can be a NOOP.
 2018-12-18 23:28:38 -06:00
Love Hornquist Astrand
f5f9014c90 Warning fixes from Christos Zoulas 
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
 2011-04-29 20:25:05 -07:00
Love Hornquist Astrand
d0502b2eb4 return error message from lower layer, only modify for Kerberos 2011-04-14 12:54:16 -07:00
Love Hornquist Astrand
7c7dd8e1af prefix SLIST with HEIM 2010-12-12 11:45:35 -08:00
Asanka Herath
5dcc605f6b Fix calling conventions for Windows 2010-08-20 13:14:10 -04:00
Love Hornquist Astrand
2b1645aa08 catch error from as.*printf 2010-05-30 13:44:41 -07:00
Love Hornquist Astrand
d890db78a8 Drop RCSID 2009-09-10 09:06:18 -07:00
Love Hörnquist Åstrand
61a2a0fe7a set right return value 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25200 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-05-09 14:20:50 +00:00
Love Hörnquist Åstrand
b9455d54f4 set right return value 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25199 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2009-05-09 14:20:36 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
f7090285fd make compile 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23700 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-08-27 11:14:09 +00:00
Love Hörnquist Åstrand
541c7a5d2b allow registration of krb5_plugins though the gss-api layer 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23698 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-08-27 11:13:48 +00:00
Love Hörnquist Åstrand
f27b97c10b As long as we got one kerberos cred, be happy with the first one. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23545 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-08-16 23:00:10 +00:00
Love Hörnquist Åstrand
39fe446983 Support parsing KRB-ERROR passed back from windows server when the time is out of sync, modify krb5_cc_[sg]et_config interface to handle principals too, add tests for this 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23420 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-07-26 18:37:48 +00:00
Love Hörnquist Åstrand
a3bc3e9fed add krb5_gss_register_acceptor_identity 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23200 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-05-29 02:12:11 +00:00
Love Hörnquist Åstrand
795ee939ea Add declspec for Windows 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23025 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2008-04-17 10:01:57 +00:00
Love Hörnquist Åstrand
40426b1fcd Readd gss_krb5_get_tkt_flags. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21889 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-08-09 07:43:24 +00:00
Love Hörnquist Åstrand
0dea8f59be Free memory in error case, found by beam. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21123 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-06-18 20:05:26 +00:00
Love Hörnquist Åstrand
6eb598fa83 reimplement gss_krb5_ccache_name 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20383 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-18 08:49:53 +00:00
Love Hörnquist Åstrand
bdff5b6032 (gss_krb5_set_allowable_enctypes): use the length of the array passed 
in, stop leaking memory, check for error conditions.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20322 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2007-04-12 16:43:50 +00:00
Love Hörnquist Åstrand
c4b2189f09 Implement gss_krb5_set_allowable_enctypes 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18974 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-11-10 00:57:27 +00:00
Love Hörnquist Åstrand
e91161433a Add gsskrb5_set_default_realm. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18963 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-11-08 23:11:03 +00:00
Love Hörnquist Åstrand
c978e4fb68 No depenency of the krb5 gssapi mech. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18946 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-11-07 22:15:52 +00:00
Love Hörnquist Åstrand
3dd9bbd06d (gsskrb5_extract_authtime_from_sec_context): use _gsskrb5_decode_om_uint32 
From Andrew Bartlet


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18945 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-11-07 22:03:29 +00:00
Love Hörnquist Åstrand
79be8d802d Add dummy gss_krb5_set_allowable_enctypes for now. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18944 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-11-07 21:57:47 +00:00
Love Hörnquist Åstrand
b38b62d51a (gsskrb5_get_subkey): return the per message token subkey 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18929 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-11-07 14:41:35 +00:00
Love Hörnquist Åstrand
d3eeb37f3d Add gsskrb5_extract_authz_data_from_sec_context and keyblock 
extraction functions.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18915 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-11-05 00:23:01 +00:00
Love Hörnquist Åstrand
0cd59b2fa5 Rename various routines and constants from canonize to canonicalize. 
From Andrew Bartlett


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18903 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-11-04 03:12:46 +00:00
Love Hörnquist Åstrand
da3d6a24ab Add gsskrb5_extract_authtime_from_sec_context. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18723 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-10-20 22:05:02 +00:00
Love Hörnquist Åstrand
75f1c15254 Add gsskrb5_set_send_to_kdc 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18682 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-10-20 18:55:37 +00:00
Love Hörnquist Åstrand
f8da152434 Add gsskrb5_set_dns_canonlize. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18513 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-10-17 09:43:27 +00:00
Love Hörnquist Åstrand
6ed70e5571 add bits to make lucid context work 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18491 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-10-17 03:01:51 +00:00
Love Hörnquist Åstrand
4860ab5db8 Add lucid interface. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@18412 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-10-12 08:50:42 +00:00
Love Hörnquist Åstrand
e177561ec2 implement gsskrb5_register_acceptor_identity 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17846 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-07-20 02:18:08 +00:00
Love Hörnquist Åstrand
65d9f1bd98 (gss_krb5_import_cred): make sure cred is GSS_C_NO_CREDENTIAL on failure. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17733 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-06-28 23:42:32 +00:00
Love Hörnquist Åstrand
c52efdc69a Reimplement GSS_KRB5_COPY_CCACHE_X to instead pass a fullname to the 
credential, then resolve and copy out the content, and then close the cred.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17728 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-06-28 17:27:02 +00:00
Love Hörnquist Åstrand
ab4040e2e7 (gss_krb5_import_cred): implement 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17724 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-06-28 14:54:20 +00:00
Love Hörnquist Åstrand
61a30996ac (gss_krb5_import_cred): almost an implementation 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17720 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-06-28 14:38:24 +00:00
Love Hörnquist Åstrand
1c95df4d9b Add dummy gss_krb5_import_cred 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17712 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-06-28 10:12:51 +00:00
Love Hörnquist Åstrand
d3f8f8e122 Bug fixes, cleanup, compiler warnings, restructure code. 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17700 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-06-28 09:00:26 +00:00
Love Hörnquist Åstrand
2baa7e7d61 Initial revision 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17692 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2006-06-28 08:34:45 +00:00