Viktor Dukhovni fca6363307 Drop delegated creds when target is NULL ...

In gsskrb5_accept_delegated_token() it is wrong to store the delegated
credentials in the default ccache by default.  When the caller does not
provide a target credential handle, we just do nothing and return success.

Test the return value of gsskrb5_accept_delegated_token() against
GSS_S_COMPLETE, rather than 0.

2015-03-10 03:07:29 +00:00

..

8003.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

accept_sec_context.c

Drop delegated creds when target is NULL

2015-03-10 03:07:29 +00:00

acquire_cred.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

add_cred.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

address_to_krb5addr.c

flatten include headers

2009-01-25 00:35:00 +00:00

aeap.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

arcfour.c

switch to KRB5_ENCTYPE

2011-07-24 16:02:22 -07:00

authorize_localname.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

canonicalize_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

ccache_name.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

cfx.c

s4-heimdal: Remove the execute flag of cfx.c.

2014-03-24 23:07:49 -05:00

cfx.h

Switch from using a specific error message context in the TLS to have

2006-11-13 18:02:57 +00:00

compare_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

compat.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

context_time.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

copy_ccache.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

creds.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

decapsulate.c

Use constant time memcmp

2009-08-17 12:04:51 +02:00

delete_sec_context.c

heimdal Use a seperate krb5_auth_context for the delegated credentials

2010-10-02 20:47:12 -07:00

display_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

display_status.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

duplicate_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

encapsulate.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

export_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

export_sec_context.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

external.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

get_mic.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

gkrb5_err.et

add KG_INPUT_TOO_LONG

2007-01-24 00:14:24 +00:00

gsskrb5_locl.h

heimdal Use a seperate krb5_auth_context for the delegated credentials

2010-10-02 20:47:12 -07:00

import_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

import_sec_context.c

setup cfx context, found by Jaideep Padhye

2011-02-02 21:37:26 -08:00

indicate_mechs.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

init_sec_context.c

heimdal: Fix 241482 Resource leak

2014-03-24 23:07:50 -05:00

init.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

inquire_context.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_cred_by_mech.c

Fix gss_inquire_cred_by_mech.

2015-03-10 03:07:29 +00:00

inquire_cred_by_oid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_cred.c

Fix gss_inquire_cred_by_mech.

2015-03-10 03:07:29 +00:00

inquire_mechs_for_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_names_for_mech.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

inquire_sec_context_by_oid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

pname_to_uid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

prf.c

Fix krb5's gss_pseudo_random() (n is big-endian)

2013-10-30 14:26:15 -05:00

process_context_token.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

release_buffer.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

release_cred.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

release_name.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

sequence.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

set_cred_option.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

set_sec_context_option.c

rewrite send to kdc to be more agressive, try kdcs in paralell and easier to configure behavior

2013-02-10 19:02:52 -08:00

store_cred.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_acquire_cred.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_cfx.c

switch to KRB5_ENCTYPE

2011-07-24 16:02:22 -07:00

test_cred.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_kcred.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

test_oid.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

test_sequence.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

ticket_flags.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

unwrap.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

verify_mic.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

wrap.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00