aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2011-04-09fix regression in mech SPI availability checklhoward/moonshot-mechglue-fixesLuke Howard1-2/+5
2011-04-09remove user_ok outparam from gss_authorize_localnameLuke Howard4-54/+39
2011-04-09return GSS_S_NAME_NOT_MN if name not mechnameLuke Howard1-3/+2
2011-04-09Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard6-26/+60
2011-04-09in gss_userok, import name as GSS_C_NT_USER_NAMELuke Howard1-1/+1
2011-04-09update for new authorize_localname SPILuke Howard1-0/+6
2011-04-09Cleanup, add mech type to authorize_localname SPILuke Howard3-23/+30
2011-04-08remove redundant import_name callLuke Howard1-31/+15
2011-04-08make SPI entrypoint for authorize_localname gssspi_authorize_localnameLuke Howard3-5/+7
2011-04-07implement gss_authorize_localnameLuke Howard6-64/+102
2011-04-07Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard3-193/+256
2011-04-06Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard4-18/+48
2011-04-04Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard18-310/+306
2011-04-03allow empty names when importing GSS_C_NT_ANONYMOUSLuke Howard1-4/+11
2011-04-03make const_attrs buffer staticLuke Howard1-1/+1
2011-04-03add a symbolic name, GSS_C_ATTR_LOCAL_LOGIN_USER, for local-login-user attributeLuke Howard5-10/+12
2011-04-03Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard11-349/+393
2011-04-02Determine which authdata sources to interrogate based on theLuke Howard1-3/+18
2011-04-02Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard1-1/+1
2011-04-01Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard15-335/+552
2011-04-01Support for transiting attributes between mechanismsLuke Howard1-2/+68
2011-04-01verify desired and actual mech OIDs are equal before trying gss_duplicate_nameLuke Howard1-2/+7
2011-03-28gss_userok() naming extensions wrapper need not check for completeLuke Howard1-1/+1
2011-03-27Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard10-234/+264
2011-03-22log plugin load errors to stderrLuke Howard1-7/+3
2011-03-22better debugging of plugin load failuresLuke Howard1-3/+7
2011-03-22compesenate for missing TOK_ID when calculating encap sizeLuke Howard1-0/+3
2011-03-22Fix order of operations bug in token size calculationLuke Howard1-2/+2
2011-03-22fix a couple of nits in draft-josefsson-gss-capsulate-01Luke Howard3-2/+3
2011-03-22Implement draft-josefsson-gss-capsulate-01Luke Howard6-0/+165
2011-03-21Allow absolute paths for mechglue librariesLuke Howard1-1/+5
2011-03-21add gss_pname_to_uid test to gss-serverLuke Howard1-0/+19
2011-03-21return GSS_S_UNAVAILABLE on localname lookup errorLuke Howard1-4/+10
2011-03-21add attribute-based implementation of gssd_pname_to_uidLuke Howard2-17/+121
2011-03-20set minor_status to KRB5_NO_LOCALNAME if pname_to_uid failsLuke Howard1-3/+3
2011-03-20Use PADL rather than MIT copyright for userok extensions (workLuke Howard1-18/+26
2011-03-17allow mechanisms to export a gss_duplicate_name SPI that supportsLuke Howard7-54/+45
2011-03-17really revert RTLD_FIRST fixLuke Howard1-5/+5
2011-03-17Use pointer test to avoid mechglue symbol loopbackLuke Howard1-54/+67
2011-03-17revert RTLD_FIRST checkLuke Howard1-3/+0
2011-03-17implement attribute-based userok authorisation logic as suggestedLuke Howard1-24/+121
2011-03-17use RTLD_FIRST to avoid pulling in dependent symbolsLuke Howard1-5/+8
2011-03-17avoid unnecessary call to gssint_get_mechanism() in case of error pathLuke Howard1-6/+6
2011-03-17plug introduced leak in gss_acquire_credLuke Howard1-0/+2
2011-03-17If calling gss_accept_sec_context with non-NULL credentials, ensureLuke Howard1-5/+10
2011-03-17make gss_acquire_cred(GSS_C_NO_OID_SET) acquire credentials for allLuke Howard1-42/+32
2011-03-17look for gss_{wrap_size_limit,pname_to_uid} when dynamically loading mechs by...Luke Howard1-0/+2
2011-03-17Reinstate gss_userok and gss_pname_to_uidLuke Howard8-50/+173
2011-03-17create branch for Moonshot workLuke Howard0-0/+0
2011-03-15KDC double-free when PKINIT enabled [MITKRB5-SA-2011-003 CVE-2011-0284]Tom Yu1-0/+2