4fb6a6adc9
An implementation of draft-zhu-negoex-04 for MIT Kerberos was developed in 2011. This has been recently integrated, with many fixes from Greg Hudson. This commit ports it to Heimdal. The implementation has been interoperability tested with MIT Kerberos and Windows, using the GSS EAP mechanism developed as part of the Moonshot project. The SPNEGO code was also updated to import the state machine from Apple which improves mechListMIC processing and avoids discarding initial context tokens generated during mechanism probing, that can be used for optimistic tokens. Finally, to aid in testing, the GSS-API mechanism glue configuration file can be changed using the environment variable GSS_MECH_CONFIG. This environment variable name, along with the format of the configuration file, is compatible with MIT (although it would be difficult for a single mechanism binary to support both implementations).
26 lines
1.0 KiB
Plaintext
26 lines
1.0 KiB
Plaintext
#
|
|
# NegoEx error messages
|
|
#
|
|
|
|
id "$Id$"
|
|
|
|
error_table ngex
|
|
|
|
prefix NEGOEX
|
|
|
|
error_code INVALID_MESSAGE_SIGNATURE, "Invalid NegoEx signature"
|
|
error_code INVALID_MESSAGE_TYPE, "Invalid NegoEx message type"
|
|
error_code INVALID_MESSAGE_SIZE, "Invalid NegoEx message size"
|
|
error_code INVALID_CONVERSATION_ID, "Invalid NegoEx conversation ID"
|
|
error_code AUTH_SCHEME_NOT_FOUND, "NegoEx authentication scheme not found"
|
|
error_code MISSING_NEGO_MESSAGE, "Missing NegoEx negotiate message"
|
|
error_code MISSING_AP_REQUEST_MESSAGE, "Missing NegoEx authentication protocol request message"
|
|
error_code NO_AVAILABLE_MECHS, "No mutually supported NegoEx authentication schemes"
|
|
error_code NO_VERIFY_KEY, "No NegoEx verify key"
|
|
error_code UNKNOWN_CHECKSUM_SCHEME, "Unknown NegoEx checksum scheme"
|
|
error_code INVALID_CHECKSUM, "Invalid NegoEx checksum"
|
|
error_code UNSUPPORTED_CRITICAL_EXTENSION, "Unsupported critical NegoEx extension"
|
|
error_code UNSUPPORTED_VERSION, "Unsupported NegoEx version"
|
|
error_code MESSAGE_OUT_OF_SEQUENCE, "NegoEx message out of sequence"
|
|
|