07b69b1028
If the desired mechanism can't convert the name to a MN, fail with GSS_S_BAD_NAME rather then a NULL de-reference.
Love Hörnquist Åstrand
2006-07-06 22:30:09 +00:00
fd78f09696
readd gss_spnego_inquire_names_for_mech
Love Hörnquist Åstrand
2006-07-06 19:31:57 +00:00
3db3b74783
reimplement gss_spnego_inquire_names_for_mech add support function _gss_spnego_supported_mechs
Love Hörnquist Åstrand
2006-07-06 19:31:24 +00:00
c358d8ccdc
x
Love Hörnquist Åstrand
2006-07-06 16:49:59 +00:00
33112b20c1
x
Love Hörnquist Åstrand
2006-07-06 15:56:07 +00:00
2a2b91e51b
Check for cross realm case where remove user doesn't exists in the database, this is ok assuming the cross realm isn't local. In the general case this isn't true.
Love Hörnquist Åstrand
2006-07-06 15:50:31 +00:00
ce5ef410ee
(tgs_build_reply): when checking for removed principals, check the second component of the krbtgt, otherwise cross realm wont work. Prompted by report from Mattias Amnefelt.
Love Hörnquist Åstrand
2006-07-06 15:38:31 +00:00
0b7b83d732
Only allow exporting MN, reset exported_name.
Love Hörnquist Åstrand
2006-07-05 22:41:57 +00:00
5f14a70630
drop gss_spnego_indicate_mechs
Love Hörnquist Åstrand
2006-07-05 22:38:02 +00:00
1fac73929a
if the underlaying mech doesn't support gss_indicate_mechs, use the oid in the mechswitch structure
Love Hörnquist Åstrand
2006-07-05 22:36:49 +00:00
3a8f9143b7
let the mech glue layer implement gss_indicate_mechs
Love Hörnquist Åstrand
2006-07-05 22:35:45 +00:00
34d35f83bf
(gss_spnego_acquire_cred): don't care about desired_mechs, get our own list with indicate_mechs and remote ourself.
Love Hörnquist Åstrand
2006-07-05 22:35:02 +00:00
909a02791f
remove gss_spnego_inquire_names_for_mech, let the mechglue layer implement it
Love Hörnquist Åstrand
2006-07-05 21:32:49 +00:00
22ea639a6f
x
Love Hörnquist Åstrand
2006-07-05 12:00:43 +00:00
5f62c460c3
(handle_vanilla_tcp): use unsigned integer for for length( (handle_tcp): if the high bit it set in the unknown case, send back a KRB_ERR_FIELD_TOOLONG
Love Hörnquist Åstrand
2006-07-05 12:00:16 +00:00
706ef0ecd5
(krb5_parse_name): set *principal to NULL the first thing we do, so that on failure its set to a known value
Love Hörnquist Åstrand
2006-07-01 09:30:15 +00:00
f409403b7d
AcquireCreds: set principal to NULL to avoid memory corruption GetTargetName: always send a string, even though we don't have a targetname
Love Hörnquist Åstrand
2006-07-01 09:28:42 +00:00
923d63fd9e
x
Love Hörnquist Åstrand
2006-07-01 09:20:27 +00:00
afd0ce92a8
externalize principal/password handling
Love Hörnquist Åstrand
2006-07-01 09:07:02 +00:00
bff708b6c9
x
Love Hörnquist Åstrand
2006-07-01 08:51:06 +00:00
f69250b34c
fix argument to gss_release_cred
Love Hörnquist Åstrand
2006-07-01 08:50:49 +00:00
7bee6b7a5b
x
Love Hörnquist Åstrand
2006-07-01 08:44:50 +00:00
88c076e738
break out common function; add gssmaestro (that only tests one context for now)
Love Hörnquist Åstrand
2006-07-01 08:44:30 +00:00
0af8ebf043
(krb5_storage_from_fd): don't leak fd on malloc failure
Love Hörnquist Åstrand
2006-06-30 21:23:19 +00:00
9b1216b13c
x
Love Hörnquist Åstrand
2006-06-30 20:57:50 +00:00
b1537f3cca
Make work on compilers that are somewhat more picky then gcc4 (like gcc2.95)
Love Hörnquist Åstrand
2006-06-30 20:57:33 +00:00
606de3c785
x
Love Hörnquist Åstrand
2006-06-30 20:28:36 +00:00
056e83995c
Add gssmask
Love Hörnquist Åstrand
2006-06-30 20:26:15 +00:00
85d0301916
Add appl/gssmask/Makefile
Love Hörnquist Åstrand
2006-06-30 20:24:48 +00:00
3585ec2167
x
Love Hörnquist Åstrand
2006-06-30 20:21:37 +00:00
1a7f7f4e24
split out fetching of credentials for easier reuse for pk-init testing
Love Hörnquist Åstrand
2006-06-30 20:21:24 +00:00
54afe1180f
(do_delegation): use KDCOptions2int to convert fwd_flags to an integer, since otherwise int2KDCOptions in krb5_get_forwarded_creds wont do the right thing.
Love Hörnquist Åstrand
2006-06-30 19:38:40 +00:00
348154aed4
(gss_set_cred_option): free memory on failure
Love Hörnquist Åstrand
2006-06-30 19:35:17 +00:00
850616a934
(_gsskrb5_set_sec_context_option): init global kerberos context
Love Hörnquist Åstrand
2006-06-30 19:34:09 +00:00
997e17d6a4
(_gsskrb5_set_cred_option): init global kerberos context
Love Hörnquist Åstrand
2006-06-30 19:33:48 +00:00
81e9020b7d
Insert the delegated sub cred on the delegated cred handle, not cred handle
Love Hörnquist Åstrand
2006-06-30 19:11:48 +00:00
f6770953cf
(gss_accept_sec_context): handle the case where ret_flags == NULL
Love Hörnquist Åstrand
2006-06-30 18:42:41 +00:00
2901cf9c42
(add_builtin): set _gss_mech_switch->gm_mech_oid
Love Hörnquist Åstrand
2006-06-30 18:04:41 +00:00
ce5954837b
(gss_set_cred_option): laod mechs
Love Hörnquist Åstrand
2006-06-30 17:41:54 +00:00
2709915a99
(krb5_cc_new_unique): use KRB5_DEFAULT_CCNAME as the default prefix
Love Hörnquist Åstrand
2006-06-30 17:08:40 +00:00
1af93ea1ef
correct the directory for the gss test program
Love Hörnquist Åstrand
2006-06-30 14:10:51 +00:00
8cd7187d18
Add extern "C" for C++.
Love Hörnquist Åstrand
2006-06-30 13:42:39 +00:00
0462a61c9d
x
Love Hörnquist Åstrand
2006-06-30 13:41:49 +00:00
f4e84f2cac
Add rtbl_add_column_entryv functions, printf like
Love Hörnquist Åstrand
2006-06-30 13:41:40 +00:00
cb915dd449
add tests/gss
Love Hörnquist Åstrand
2006-06-30 12:25:29 +00:00
146432c77a
Add gss to SUBDIR
Love Hörnquist Åstrand
2006-06-30 12:24:59 +00:00
314c661b24
build and check gss
Love Hörnquist Åstrand
2006-06-30 12:24:42 +00:00
b0a5f762f8
testrun gss program
Love Hörnquist Åstrand
2006-06-30 12:24:04 +00:00
e024f3655a
Build the gss program.
Love Hörnquist Åstrand
2006-06-30 12:06:30 +00:00
b51056b512
x
Love Hörnquist Åstrand
2006-06-30 11:55:40 +00:00
3e8a39a63f
(gss_print_errors): don't try to print error when gss_display_status failed
Love Hörnquist Åstrand
2006-06-30 11:55:28 +00:00
ace8ba1ea7
x
Love Hörnquist Åstrand
2006-06-30 09:41:35 +00:00
5e8ef3b0f0
Add mech/gss_release_oid.c
Love Hörnquist Åstrand
2006-06-30 09:35:59 +00:00
efa462a843
Add gss_release_oid, reverse of gss_duplicate_oid
Love Hörnquist Åstrand
2006-06-30 09:34:54 +00:00
3139d01195
preferred_mech_type was allocated with gss_duplicate_oid in one place and assigned static varianbles a the second place. change that static assignement to gss_duplicate_oid and bring back gss_release_oid.
Love Hörnquist Åstrand
2006-06-30 09:33:03 +00:00
ba3568494e
(_gss_spnego_delete_sec_context): don't release preferred_mech_type and negotiated_mech_type, they where never allocated from the begining.
Love Hörnquist Åstrand
2006-06-30 09:25:08 +00:00
6e451eae2a
On failure to find a correct error string, set status_string to NULL
Love Hörnquist Åstrand
2006-06-29 21:53:38 +00:00
cafe5bd62e
x
Love Hörnquist Åstrand
2006-06-29 07:29:20 +00:00
498cd10430
Make gss_name_t an opaque type.
Love Hörnquist Åstrand
2006-06-29 07:28:31 +00:00
03567db502
make gss_name_t an opaque type
Love Hörnquist Åstrand
2006-06-29 07:27:26 +00:00
b79c379578
(gss_set_cred_option): support the case where *cred_handle == NULL
Love Hörnquist Åstrand
2006-06-29 07:17:26 +00:00
318994275e
Add gss_set_cred_option
Love Hörnquist Åstrand
2006-06-28 23:46:41 +00:00
65d9f1bd98
(gss_krb5_import_cred): make sure cred is GSS_C_NO_CREDENTIAL on failure.
Love Hörnquist Åstrand
2006-06-28 23:42:32 +00:00
b7090bd0ed
(gss_acquire_cred): if desired_mechs is NO_OID_SET, there is a need to load the mechs, so always do that.
Love Hörnquist Åstrand
2006-06-28 23:15:18 +00:00
f3af075590
x
Love Hörnquist Åstrand
2006-06-28 17:45:06 +00:00
dc781671f0
Reimplement GSS_KRB5_COPY_CCACHE_X to instead pass a fullname to the credential, then resolve and copy out the content, and then close the cred.
Love Hörnquist Åstrand
2006-06-28 17:33:29 +00:00
c52efdc69a
Reimplement GSS_KRB5_COPY_CCACHE_X to instead pass a fullname to the credential, then resolve and copy out the content, and then close the cred.
Love Hörnquist Åstrand
2006-06-28 17:27:02 +00:00
6f241708fb
make "work", GSS_KRB5_COPY_CCACHE_X interface needs to be re-done, currently its utterly broken.
Love Hörnquist Åstrand
2006-06-28 16:21:28 +00:00
ace187d740
Make work.
Love Hörnquist Åstrand
2006-06-28 16:20:41 +00:00
e6b82dd964
Add _gsskrb5_set_{sec_context,cred}_option
Love Hörnquist Åstrand
2006-06-28 15:16:50 +00:00
ab4040e2e7
(gss_krb5_import_cred): implement
Love Hörnquist Åstrand
2006-06-28 14:54:20 +00:00
de2d91e07f
Add gss_set_{sec_context,cred}_option and sort
Love Hörnquist Åstrand
2006-06-28 14:39:40 +00:00
c717bf03c2
Add gss_set_{sec_context,cred}_option
Love Hörnquist Åstrand
2006-06-28 14:39:23 +00:00
2ec4456fee
fix compile warning
Love Hörnquist Åstrand
2006-06-28 14:39:00 +00:00
61a30996ac
(gss_krb5_import_cred): almost an implementation
Love Hörnquist Åstrand
2006-06-28 14:38:24 +00:00
ebb97be4c8
Add gss_set_cred_option
Love Hörnquist Åstrand
2006-06-28 14:37:08 +00:00
364d347054
Add gss_set_cred_option
Love Hörnquist Åstrand
2006-06-28 14:27:11 +00:00
2ccb1cbe55
Add gss_set_sec_context_option
Love Hörnquist Åstrand
2006-06-28 14:26:57 +00:00
8c884b3083
Add gss_inquire_cred_by_oid
Love Hörnquist Åstrand
2006-06-28 14:16:33 +00:00
ae97ddf396
spelling
Love Hörnquist Åstrand
2006-06-28 14:10:20 +00:00
6ee243c6ca
Add GSS_KRB5_IMPORT_CRED_X
Love Hörnquist Åstrand
2006-06-28 14:09:08 +00:00
7e00d0f690
Add gss_set_{sec_context,cred}_option
Love Hörnquist Åstrand
2006-06-28 14:07:44 +00:00