Nicolas Williams 2709f28a1b Make gss_store_cred*() work ...

krb5_cc_cache_match() searches all ccache collections for a ccache that
has credentials for a given principal name.  This includes MEMORY
ccaches, which means it can find the same ccache as is referenced by a
GSS cred handle given to gss_store_cred(), which means that
gss_store_cred() can fail.

For now we work around this by including a private variant of
krb5_cc_cache_match() that only searches the default ccache, not all
collections.  Eventually we should ensure that krb5_cc_default() also
searches all collection-type (other than MEMORY) ccaches for a default
credential, then we can go back to using krb5_cc_cache_match() (though
we'll need to make sure that MEMORY is searched last or not at all).

2019-09-05 09:52:49 -05:00

..

8003.c

Round #2 of scan-build warnings cleanup

2016-11-16 17:03:14 -06:00

accept_sec_context.c

gss/krb5: gsskrb5_acceptor_start authenticator leak (take two)

2016-11-19 23:59:30 -05:00

acquire_cred.c

gssapi: credential store extensions (#451)

2019-01-03 14:38:39 -06:00

add_cred.c

gssapi: credential store extensions (#451)

2019-01-03 14:38:39 -06:00

address_to_krb5addr.c

flatten include headers

2009-01-25 00:35:00 +00:00

aeap.c

lib/gssapi/krb5: implement gss_[un]wrap_iov[_length] with arcfour-hmac-md5

2015-07-31 17:30:23 +12:00

arcfour.c

use memset_s

2017-04-29 01:05:59 -04:00

authorize_localname.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

canonicalize_name.c

Revamp name canonicalization code

2015-03-24 11:49:58 -05:00

ccache_name.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

cfx.c

Round #2 of scan-build warnings cleanup

2016-11-16 17:03:14 -06:00

cfx.h

Switch from using a specific error message context in the TLS to have

2006-11-13 18:02:57 +00:00

compare_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

compat.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

context_time.c

Round #2 of scan-build warnings cleanup

2016-11-16 17:03:14 -06:00

copy_ccache.c

Rename cred handle lifetime to endtime

2015-04-14 11:27:25 -05:00

creds.c

Round #2 of scan-build warnings cleanup

2016-11-16 17:03:14 -06:00

decapsulate.c

lib/gssapi/krb5: make _gssapi_verify_pad() more robust

2015-07-31 17:30:23 +12:00

delete_sec_context.c

heimdal Use a seperate krb5_auth_context for the delegated credentials

2010-10-02 20:47:12 -07:00

display_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

display_status.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

duplicate_cred.c

gssapi: credential store extensions (#451)

2019-01-03 14:38:39 -06:00

duplicate_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

encapsulate.c

move _gssapi_make_mech_header to avoid need to prototype

2018-04-19 13:12:59 -04:00

export_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

export_sec_context.c

Rename context handle lifetime to endtime

2015-04-14 11:27:25 -05:00

external.c

gssapi: implement gss_set_neg_mechs() (#495)

2019-01-04 15:50:11 +11:00

get_mic.c

use memset_s

2017-04-29 01:05:59 -04:00

gkrb5_err.et

gssapi: credential store extensions (#451)

2019-01-03 14:38:39 -06:00

gsskrb5_locl.h

gss: _locl.h files should include local copy of -private.h files

2018-04-19 13:12:59 -04:00

import_name.c

princ type NT-UNKNOWN + "host" == NT-SRV-HST

2016-11-14 21:29:47 -06:00

import_sec_context.c

Rename context handle lifetime to endtime

2015-04-14 11:27:25 -05:00

indicate_mechs.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

init_sec_context.c

Round #2 of scan-build warnings cleanup

2016-11-16 17:03:14 -06:00

init.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

inquire_context.c

Rename context handle lifetime to endtime

2015-04-14 11:27:25 -05:00

inquire_cred_by_mech.c

Fix gss_inquire_cred_by_mech.

2015-03-10 03:07:29 +00:00

inquire_cred_by_oid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_cred.c

gssapi: credential store extensions (#451)

2019-01-03 14:38:39 -06:00

inquire_mechs_for_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_names_for_mech.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

inquire_sec_context_by_oid.c

Misc fixes (coverity)

2016-11-18 22:21:45 -06:00

pname_to_uid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

prf.c

Fix krb5's gss_pseudo_random() (n is big-endian)

2013-10-30 14:26:15 -05:00

process_context_token.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

release_buffer.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

release_cred.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

release_name.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

sequence.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

set_cred_option.c

gssapi: gss_krb5_set_allowable_enctypes prototype mismatch

2019-01-03 17:54:38 +11:00

set_sec_context_option.c

rewrite send to kdc to be more agressive, try kdcs in paralell and easier to configure behavior

2013-02-10 19:02:52 -08:00

store_cred.c

Make gss_store_cred*() work

2019-09-05 09:52:49 -05:00

test_acquire_cred.c

Rewrite gss_add_cred() (fix #413)

2018-12-28 19:26:25 -06:00

test_cfx.c

switch to KRB5_ENCTYPE

2011-07-24 16:02:22 -07:00

test_cred.c

Rewrite gss_add_cred() (fix #413)

2018-12-28 19:26:25 -06:00

test_kcred.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_oid.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

test_sequence.c

Minor typo/grammar fixes

2017-03-10 15:47:43 -05:00

ticket_flags.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

unwrap.c

GSS unwrap: wipe copy of DES key when done with it

2018-12-14 06:18:26 -05:00

verify_mic.c

use memset_s

2017-04-29 01:05:59 -04:00

wrap.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00