summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* fix regression in mech SPI availability checklhoward/moonshot-mechglue-fixesLuke Howard2011-04-091-2/+5
* remove user_ok outparam from gss_authorize_localnameLuke Howard2011-04-094-54/+39
* return GSS_S_NAME_NOT_MN if name not mechnameLuke Howard2011-04-091-3/+2
* Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard2011-04-096-26/+60
* in gss_userok, import name as GSS_C_NT_USER_NAMELuke Howard2011-04-091-1/+1
* update for new authorize_localname SPILuke Howard2011-04-091-0/+6
* Cleanup, add mech type to authorize_localname SPILuke Howard2011-04-093-23/+30
* remove redundant import_name callLuke Howard2011-04-081-31/+15
* make SPI entrypoint for authorize_localname gssspi_authorize_localnameLuke Howard2011-04-083-5/+7
* implement gss_authorize_localnameLuke Howard2011-04-076-64/+102
* Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard2011-04-073-193/+256
* Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard2011-04-064-18/+48
* Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard2011-04-0418-310/+306
* allow empty names when importing GSS_C_NT_ANONYMOUSLuke Howard2011-04-031-4/+11
* make const_attrs buffer staticLuke Howard2011-04-031-1/+1
* add a symbolic name, GSS_C_ATTR_LOCAL_LOGIN_USER, for local-login-user attributeLuke Howard2011-04-035-10/+12
* Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard2011-04-0311-349/+393
* Determine which authdata sources to interrogate based on theLuke Howard2011-04-021-3/+18
* Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard2011-04-021-1/+1
* Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard2011-04-0115-335/+552
* Support for transiting attributes between mechanismsLuke Howard2011-04-011-2/+68
* verify desired and actual mech OIDs are equal before trying gss_duplicate_nameLuke Howard2011-04-011-2/+7
* gss_userok() naming extensions wrapper need not check for completeLuke Howard2011-03-281-1/+1
* Merge branch 'master' into users/lhoward/moonshot-mechglue-fixesLuke Howard2011-03-2710-234/+264
* log plugin load errors to stderrLuke Howard2011-03-221-7/+3
* better debugging of plugin load failuresLuke Howard2011-03-221-3/+7
* compesenate for missing TOK_ID when calculating encap sizeLuke Howard2011-03-221-0/+3
* Fix order of operations bug in token size calculationLuke Howard2011-03-221-2/+2
* fix a couple of nits in draft-josefsson-gss-capsulate-01Luke Howard2011-03-223-2/+3
* Implement draft-josefsson-gss-capsulate-01Luke Howard2011-03-226-0/+165
* Allow absolute paths for mechglue librariesLuke Howard2011-03-211-1/+5
* add gss_pname_to_uid test to gss-serverLuke Howard2011-03-211-0/+19
* return GSS_S_UNAVAILABLE on localname lookup errorLuke Howard2011-03-211-4/+10
* add attribute-based implementation of gssd_pname_to_uidLuke Howard2011-03-212-17/+121
* set minor_status to KRB5_NO_LOCALNAME if pname_to_uid failsLuke Howard2011-03-201-3/+3
* Use PADL rather than MIT copyright for userok extensions (workLuke Howard2011-03-201-18/+26
* allow mechanisms to export a gss_duplicate_name SPI that supportsLuke Howard2011-03-177-54/+45
* really revert RTLD_FIRST fixLuke Howard2011-03-171-5/+5
* Use pointer test to avoid mechglue symbol loopbackLuke Howard2011-03-171-54/+67
* revert RTLD_FIRST checkLuke Howard2011-03-171-3/+0
* implement attribute-based userok authorisation logic as suggestedLuke Howard2011-03-171-24/+121
* use RTLD_FIRST to avoid pulling in dependent symbolsLuke Howard2011-03-171-5/+8
* avoid unnecessary call to gssint_get_mechanism() in case of error pathLuke Howard2011-03-171-6/+6
* plug introduced leak in gss_acquire_credLuke Howard2011-03-171-0/+2
* If calling gss_accept_sec_context with non-NULL credentials, ensureLuke Howard2011-03-171-5/+10
* make gss_acquire_cred(GSS_C_NO_OID_SET) acquire credentials for allLuke Howard2011-03-171-42/+32
* look for gss_{wrap_size_limit,pname_to_uid} when dynamically loading mechs by...Luke Howard2011-03-171-0/+2
* Reinstate gss_userok and gss_pname_to_uidLuke Howard2011-03-178-50/+173
* create branch for Moonshot workLuke Howard2011-03-170-0/+0
* KDC double-free when PKINIT enabled [MITKRB5-SA-2011-003 CVE-2011-0284]Tom Yu2011-03-151-0/+2