Files
heimdal/lib/gssapi/krb5
Nicolas Williams be708ca3cf gsskrb5: Add simple name attributes support
This adds Kerberos mechanism support for:

 - composite principal name export/import
 - getting rudimentary name attributes from GSS names using
   gss_get_name_attribute():
    - all (raw) authorization data from the Ticket
    - all (raw) authorization data from the Authenticator
    - transit path
    - realm
    - component count
    - each component
 - gss_inquire_name()
 - gss_display_name_ext() (just for the hostbased service name type
                           though)

The test exercises almost all of the functionality, except for:

 - getting the PAC
 - getting authz-data from the Authenticator
 - getting the transit path

TBD (much) later:

 - amend test_context to do minimal name attribute checks as well
 - gss_set_name_attribute() (to request authz-data)
 - gss_delete_name_attribute()
 - getting specific authorization data elements via URN fragments (as
   opposed to all of them)
 - parsing the PAC, extracting SIDs (each one as a separate value)
 - some configurable local policy (?)
 - plugin interface for additional local policy
2022-01-01 23:30:15 -06:00
..
2009-01-25 00:35:00 +00:00
2011-05-21 11:57:31 -07:00
2017-04-29 01:05:59 -04:00
2020-02-04 17:28:35 +11:00
2011-05-21 11:57:31 -07:00
2011-07-24 16:02:22 -07:00
2018-12-28 19:26:25 -06:00
2019-10-03 13:09:18 -05:00
2017-03-10 15:47:43 -05:00
2017-04-29 01:05:59 -04:00