Roland C. Dowdeswell 3a6229f64a gss_accept_sec_context: support reassembling split tokens. ...

Microsoft will sometimes split GSS tokens when they exceed a certain
size in some protocols.  This is specified in

	[MS-SPNG]: Simple and Protected GSS-API Negotiation
	Mechanism (SPNEGO) Extension

https://winprotocoldoc.blob.core.windows.net/productionwindowsarchives/MS-SPNG/%5bMS-SPNG%5d.pdf

sections 3.1.5.4 to 3.1.5.9.

We extend gss_accept_sec_context() to recognise partial tokens and
to accumulate the fragments until an entire token is available to
be processed.  If the entire token is not yet available,
GSS_S_CONTINUE_NEEDED is returned with a zero length output token.
This is specified in RFC2744 page 25-26 to indicate that no reply
need be sent.

We include updates to the test framework to test split tokens when
using SPNEGO.

2021-08-07 18:54:56 +10:00

..

gssapi

gssapi: add channel-bound return flag

2021-08-06 13:15:19 +10:00

krb5

gssapi/krb5/{export,import}_sec_context: make smaller tokens.

2021-08-07 18:54:56 +10:00

mech

gss_accept_sec_context: support reassembling split tokens.

2021-08-07 18:54:56 +10:00

netlogon

Properly implement neg_mechs & GM_USE_MG_CRED

2020-04-21 00:21:32 -05:00

ntlm

gss: don't leak NTLM cred on failure

2021-08-02 17:09:55 +10:00

sanon

gss: set GSS_C_CHANNEL_BOUND_FLAG for SAnon

2021-08-06 13:21:36 +10:00

spnego

gss: zero spnego mechanism token error buffer

2021-08-02 15:55:10 +10:00

ChangeLog

switch to utf8 encoding of all files

2008-09-13 08:53:55 +00:00

gen-oid.pl

gss: intern OIDs (#447)

2018-12-18 23:28:38 -06:00

gss_acquire_cred.3

Fix assorted typos

2018-12-14 17:30:14 -05:00

gss-commands.in

use sl_did_you_mean

2011-11-22 12:18:48 -08:00

gss-token.1

gss-token: implement -m to specify what mech to use.

2020-10-12 21:55:51 +01:00

gss-token.c

gss-token: initialise input buffer to empty

2021-08-07 08:40:20 +10:00

gssapi_mech.h

gss: SAnon - the Simple Anonymous GSS-API mechanism

2020-04-25 23:19:30 -05:00

gssapi.3

remove trailing whitespace

2011-05-21 11:57:31 -07:00

gssapi.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

gsstool.c

use sl_did_you_mean

2011-11-22 12:18:48 -08:00

libgssapi-exports.def

gss: SAnon - the Simple Anonymous GSS-API mechanism

2020-04-25 23:19:30 -05:00

libgssapi-version.rc

Windows: Rename libgssapi.dll -> gssapi.dll

2010-08-20 13:14:15 -04:00

Makefile.am

gss: SAnon - the Simple Anonymous GSS-API mechanism

2020-04-25 23:19:30 -05:00

NTMakefile

gss: SAnon - the Simple Anonymous GSS-API mechanism

2020-04-25 23:19:30 -05:00

oid.txt

Document OID arcs delegated to Heimdal by SU

2021-03-25 10:38:28 -05:00

test_acquire_cred.c

gss: Fix some test leaks

2020-04-25 21:22:32 -05:00

test_add_store_cred.c

krb5: Improve cccol sub naming; add gss_store_cred_into2()

2020-03-02 17:48:04 -06:00

test_common.c

More fixes for -Werror (GCC 4.6 catches more stuff)

2011-11-02 23:20:55 -05:00

test_common.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

test_context.c

gss_accept_sec_context: support reassembling split tokens.

2021-08-07 18:54:56 +10:00

test_cred.c

gss: SAnon - the Simple Anonymous GSS-API mechanism

2020-04-25 23:19:30 -05:00

test_kcred.c

Add note about racy tests

2019-10-03 13:09:18 -05:00

test_names.c

gss: SAnon - the Simple Anonymous GSS-API mechanism

2020-04-25 23:19:30 -05:00

test_negoex_mech.c

gss: plug leak in test_negoex_mech

2020-03-02 17:16:58 +11:00

test_ntlm.c

Round #2 of scan-build warnings cleanup

2016-11-16 17:03:14 -06:00

test_oid.c

Include <roken.h> before <gssapi.h>

2010-12-01 17:54:29 -05:00

version-script.map

gss: SAnon - the Simple Anonymous GSS-API mechanism

2020-04-25 23:19:30 -05:00