Stefan Metzmacher 8c3c97bdf6 gsskrb5: let GSS_C_DCE_STYLE imply GSS_C_MUTUAL_FLAG as acceptor ...

Windows clients forget GSS_C_MUTUAL_FLAG in some situations where they
use GSS_C_DCE_STYLE, in the assumption that GSS_C_MUTUAL_FLAG is
implied.

Both Windows and MIT as server already imply GSS_C_MUTUAL_FLAG
when GSS_C_DCE_STYLE is used.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15740

Signed-off-by: Stefan Metzmacher <metze@samba.org>

2025-04-16 12:59:37 -04:00

..

8003.c

gsskrb5: let GSS_C_DCE_STYLE imply GSS_C_MUTUAL_FLAG as acceptor

2025-04-16 12:59:37 -04:00

accept_sec_context.c

gsskrb5: Fix dead code issues in deleg cred path

2022-01-17 18:10:08 -06:00

acquire_cred.c

gsskrb5: Use optimistic anon PKINIT armored FAST

2021-12-30 18:54:54 +11:00

add_cred.c

gsskrb5: Check dst-TGT pokicy at store time

2020-07-09 13:27:11 -05:00

address_to_krb5addr.c

flatten include headers

2009-01-25 00:35:00 +00:00

aeap.c

lib/gssapi/krb5: implement gss_[un]wrap_iov[_length] with arcfour-hmac-md5

2015-07-31 17:30:23 +12:00

arcfour.c

gssapi: Sequence errors should not be fatal

2024-07-06 16:06:54 -04:00

authorize_localname.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

canonicalize_name.c

Revamp name canonicalization code

2015-03-24 11:49:58 -05:00

ccache_name.c

gss: implement gss_krb5_ccache_name()

2021-09-06 13:26:55 +10:00

cfx.c

gssapi: Sequence errors should not be fatal

2024-07-06 16:06:54 -04:00

cfx.h

Switch from using a specific error message context in the TLS to have

2006-11-13 18:02:57 +00:00

compare_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

compat.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

context_time.c

Round #2 of scan-build warnings cleanup

2016-11-16 17:03:14 -06:00

copy_ccache.c

gsskrb5: Fix coverity issue

2022-01-20 13:28:57 -06:00

creds.c

gsskrb5: Add missing error check in cred import

2023-01-04 00:43:43 -06:00

decapsulate.c

gsskrb5: CVE-2022-3437 Check for overflow in _gsskrb5_get_mech()

2022-11-15 17:51:45 -06:00

delete_sec_context.c

gssapi/krb5: delete_sec_context must close ccache if CLOSE_CCACHE

2020-06-29 11:40:48 -04:00

display_name.c

gssapi/krb5: _gsskrb5_display_name return GSS_C_NT_ANONYMOUS

2024-06-04 06:22:37 -04:00

display_status.c

gss: avoid string concatenation warning in error message init

2021-05-17 10:09:01 +10:00

duplicate_cred.c

gsskrb5: Add missing unlock in _gsskrb5_duplicate_cred() failure case

2023-01-04 16:20:32 -06:00

duplicate_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

encapsulate.c

move _gssapi_make_mech_header to avoid need to prototype

2018-04-19 13:12:59 -04:00

export_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

export_sec_context.c

gssapi/krb5: _gsskrb5_export_sec_context copy/paste error

2022-01-14 23:01:30 -05:00

external.c

gss: Make krb5 name attrs table-driven

2022-01-08 10:38:01 +11:00

get_mic.c

use memset_s

2017-04-29 01:05:59 -04:00

gkrb5_err.et

gssapi: credential store extensions (#451)

2019-01-03 14:38:39 -06:00

gsskrb5_locl.h

gss: implement gss_krb5_ccache_name()

2021-09-06 13:26:55 +10:00

import_name.c

gss: Fix sign extension bug (from be708ca3cf)

2022-01-06 15:25:38 -06:00

import_sec_context.c

gssapi/krb5/{export,import}_sec_context: make smaller tokens.

2021-08-07 18:54:56 +10:00

indicate_mechs.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

init_sec_context.c

lib/gssapi/krb5: don't ignore _gsskrb5_decapsulate() result in init_sec_context responses

2024-09-03 13:38:15 -04:00

init.c

gss: register GSS_KRB5_S error table

2020-02-04 17:28:35 +11:00

inquire_context.c

Rename context handle lifetime to endtime

2015-04-14 11:27:25 -05:00

inquire_cred_by_mech.c

Fix gss_inquire_cred_by_mech.

2015-03-10 03:07:29 +00:00

inquire_cred_by_oid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_cred.c

gssapi: credential store extensions (#451)

2019-01-03 14:38:39 -06:00

inquire_mechs_for_name.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

inquire_names_for_mech.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

inquire_sec_context_by_oid.c

gss: don't truncate authtime in gsskrb5_extract_authtime_from_sec_context()

2023-01-16 09:16:39 +11:00

name_attrs.c

gsskrb5: Fix dead code in get_transited()

2022-01-17 11:50:16 -06:00

pname_to_uid.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

prf.c

gss: use mechglue instead of gsskrb5 encoders

2023-01-16 09:16:39 +11:00

process_context_token.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00

release_buffer.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

release_cred.c

gsskrb5: Check dst-TGT pokicy at store time

2020-07-09 13:27:11 -05:00

release_name.c

Fix calling conventions for Windows

2010-08-20 13:14:10 -04:00

sequence.c

gssapi: Fix ordering logic in _gssapi_msg_order_check

2024-07-06 16:06:54 -04:00

set_cred_option.c

krb5: Improve cccol sub naming; add gss_store_cred_into2()

2020-03-02 17:48:04 -06:00

set_sec_context_option.c

gss: implement gss_krb5_ccache_name()

2021-09-06 13:26:55 +10:00

store_cred.c

gsskrb5: Fix warnings

2022-01-14 17:39:05 -06:00

test_acquire_cred.c

Rewrite gss_add_cred() (fix #413)

2018-12-28 19:26:25 -06:00

test_cfx.c

switch to KRB5_ENCTYPE

2011-07-24 16:02:22 -07:00

test_cred.c

Rewrite gss_add_cred() (fix #413)

2018-12-28 19:26:25 -06:00

test_kcred.c

gss: Workaround valgrind "lifetime not equal" issue

2022-01-18 12:35:26 -06:00

test_oid.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

test_sequence.c

Minor typo/grammar fixes

2017-03-10 15:47:43 -05:00

ticket_flags.c

Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.

2009-06-22 17:56:41 +00:00

unwrap.c

gssapi: Sequence errors should not be fatal

2024-07-06 16:06:54 -04:00

verify_mic.c

gssapi: Sequence errors should not be fatal

2024-07-06 16:06:54 -04:00

wrap.c

First attempt s/\<const gss_.*_t/gss_const_.*_t/g

2013-06-02 15:30:58 -05:00