Viktor Dukhovni ca052eadd5 Fix gss_inquire_cred_by_mech. ...

Delegated or other explicit credentials were mishandled, the code only
worked correctly when processing default credentials.  In particular
this caused root's default credential cache to be accessed when accepting
delegated credentials in SSH:

    ssh_gssapi_accept_ctx() ->
        ssh_gssapi_getclient() ->
	    gss_inquire_cred_by_mech()

When /tmp/krb5cc_0 contained expired tickets, cascaded credentials
stopped working for non-root users!

2015-03-10 03:07:29 +00:00

..

8003.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

accept_sec_context.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

acquire_cred.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

add_cred.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

address_to_krb5addr.c

flatten include headers

2009-01-25 00:35:00 +00:00

aeap.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

arcfour.c

switch to KRB5_ENCTYPE

2011-07-24 16:02:22 -07:00

authorize_localname.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

canonicalize_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

ccache_name.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

cfx.c

s4-heimdal: Remove the execute flag of cfx.c.

2014-03-24 23:07:49 -05:00

cfx.h

Switch from using a specific error message context in the TLS to have

2006-11-13 18:02:57 +00:00

compare_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

compat.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

context_time.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

copy_ccache.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

creds.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

decapsulate.c

Use constant time memcmp

2009-08-17 12:04:51 +02:00

delete_sec_context.c

heimdal Use a seperate krb5_auth_context for the delegated credentials

2010-10-02 20:47:12 -07:00

display_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

display_status.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

duplicate_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

encapsulate.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

export_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

export_sec_context.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

external.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

get_mic.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

gkrb5_err.et

add KG_INPUT_TOO_LONG

2007-01-24 00:14:24 +00:00

gsskrb5_locl.h

heimdal Use a seperate krb5_auth_context for the delegated credentials

2010-10-02 20:47:12 -07:00

import_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

import_sec_context.c

setup cfx context, found by Jaideep Padhye

2011-02-02 21:37:26 -08:00

indicate_mechs.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

init_sec_context.c

heimdal: Fix 241482 Resource leak

2014-03-24 23:07:50 -05:00

init.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

inquire_context.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_cred_by_mech.c

Fix gss_inquire_cred_by_mech.

2015-03-10 03:07:29 +00:00

inquire_cred_by_oid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_cred.c

Fix gss_inquire_cred_by_mech.

2015-03-10 03:07:29 +00:00

inquire_mechs_for_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_names_for_mech.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

inquire_sec_context_by_oid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

pname_to_uid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

prf.c

Fix krb5's gss_pseudo_random() (n is big-endian)

2013-10-30 14:26:15 -05:00

process_context_token.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

release_buffer.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

release_cred.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

release_name.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

sequence.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

set_cred_option.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

set_sec_context_option.c

rewrite send to kdc to be more agressive, try kdcs in paralell and easier to configure behavior

2013-02-10 19:02:52 -08:00

store_cred.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_acquire_cred.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_cfx.c

switch to KRB5_ENCTYPE

2011-07-24 16:02:22 -07:00

test_cred.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_kcred.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_oid.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

test_sequence.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

ticket_flags.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

unwrap.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

verify_mic.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

wrap.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00