aboutsummaryrefslogtreecommitdiff
path: root/src/lib/gssapi
AgeCommit message (Expand)AuthorFilesLines
2017-11-22Length check when parsing GSS token encapsulationkrb5-1.14Greg Hudson1-6/+14
2017-09-22Preserve GSS context on init/accept failureGreg Hudson17-21/+72
2017-07-17Free GSS checksum data deterministicallyTomas Kuthan1-3/+1
2017-07-17Allow clock skew in krb5 gss_context_time()Greg Hudson1-1/+4
2017-07-17Fix leaks in gss_inquire_cred_by_oid()Greg Hudson1-5/+0
2017-07-17Allow null outputs to gss_get_name_attribute()Isaac Boukris1-10/+9
2017-01-09Use zap() more consistentlyGreg Hudson4-8/+6
2016-09-02Guess Samba client mutual flag using ap_optionsAndreas Schneider1-1/+4
2016-09-02Fix SPNEGO imported cred initializationGreg Hudson1-8/+5
2016-09-02Fix leak in gss_display_name() for non-MN namesGreg Hudson1-23/+4
2016-09-02Fix leaks on error in krb5 gss_acquire_cred()Greg Hudson1-2/+8
2016-04-13Skip unnecessary mech calls in gss_inquire_cred()Greg Hudson1-17/+22
2016-04-05Use public OID for interposing several functionsRobbie Harwood4-24/+22
2016-04-05Enable interposing gss_inquire_saslname_for_mechRobbie Harwood1-7/+20
2016-04-05Revisit inquire_attrs_for_mech on old mechsGreg Hudson1-2/+6
2016-04-05Report inquire_attrs_for_mech mech failuresRobbie Harwood1-9/+10
2016-04-05Enable interposing gss_inquire_attrs_for_mech()Robbie Harwood1-4/+11
2016-01-15Fix memory leak in SPNEGO gss_init_sec_context()Greg Hudson1-1/+2
2016-01-07Fix interposed gss_accept_sec_context()Robbie Harwood1-0/+6
2016-01-07Check internal context on init context errorsSimo Sorce1-4/+7
2016-01-07Check context handle in gss_export_sec_context()Tomas Kuthan1-2/+3
2015-11-24Fix mechglue gss_acquire_cred_impersonate_nameSimo Sorce1-1/+1
2015-11-05Fix SPNEGO context importGreg Hudson1-6/+27
2015-11-05Fix IAKERB context export/import [CVE-2015-2698]Greg Hudson3-8/+41
2015-11-05Fix two IAKERB commentsGreg Hudson1-5/+1
2015-10-26Fix IAKERB context aliasing bugs [CVE-2015-2696]Nicolas Williams3-41/+529
2015-10-26Fix SPNEGO context aliasing bugs [CVE-2015-2695]Nicolas Williams2-64/+192
2015-10-26Allow clock skew in krb5 gss_accept_sec_context()Greg Hudson2-15/+10
2015-10-26Use RUN_TEST and fix installed krb5.conf usesGreg Hudson1-1/+1
2015-10-02Fix gss_store_cred() minor code on acceptor credTomas Kuthan1-1/+1
2015-10-02Check output params on GSS OID set functionsTomas Kuthan1-0/+6
2015-10-02Correct GSS major code for non-default QOP valuesTomas Kuthan3-4/+4
2015-10-02Fix gss_inquire_names_for_mech() on MS krb5 mechTomas Kuthan1-0/+1
2015-10-02Fix typo in GSS_S_UNAUTHORIZED error messageTomas Kuthan1-1/+1
2015-10-02Define error status GSS_S_BAD_MICTomas Kuthan1-0/+1
2015-09-17Fix error mappings for IOV MIC mechglue funcsTomas Kuthan2-6/+15
2015-09-14Fix error handling in gss_export_sec_context()Nicolas Williams1-13/+17
2015-08-31Check for null name_type in gss_display_name_extSolly Ross1-1/+3
2015-08-25Update SPNEGO hintName value to current specGreg Hudson1-87/+11
2015-08-24Check mech in gss_accept_sec_context w/ no credGreg Hudson1-0/+28
2015-08-21Keep valgrind happy after time_rec changeSimo Sorce1-1/+1
2015-08-19Resolve krb5 GSS creds if time_rec is requestedSimo Sorce3-13/+25
2015-08-13Fix gss_inquire_name() name_is_MN resultIsaac Boukris1-1/+1
2015-08-10Limit use of IAKERBGreg Hudson3-4/+7
2015-08-10Don't assert GSS_C_MA_NOT_DFLT_MECH in mechglueGreg Hudson1-15/+0
2015-08-10Minor spelling and grammar fixesMichael Mattioli2-2/+2
2015-08-04Allow missing authenticator checksum with GSSAPISimo Sorce1-7/+9
2015-07-17Limit use of deprecated krb5 mech OIDsGreg Hudson2-5/+20
2015-07-06Use memory cache in gss_acquire_cred_with_passwordGreg Hudson1-9/+15
2015-07-02Fix leak in gss_acquire_cred_with_passwordGreg Hudson1-0/+3