samba.git/source3/librpc/crypto, branch talloc-2.1.6

gss: samba member server returns incorrect error code with some versions of krb5

2015-11-12T00:44:08+00:00

As per Simo's comments in https://bugzilla.redhat.com/show_bug.cgi?id=1279249
we need Samba to return the correct thing to the client when gss_accept_sec_context
returns a token along with an error.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11592

Signed-off-by: Richard Sharpe 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Thu Nov 12 01:44:08 CET 2015 on sn-devel-104

Fix format size errors for i386 in source3/librpc/crypto/gse.c

2015-07-08T22:42:15+00:00

Again, sizeof(size_t) != sizeof(uintmax_t).

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Jeremy Allison

s4:gensec/gssapi: make use of add gssapi_get_sig_size() and gssapi_{seal,unseal,sign,check}_packet() helper functions

2015-06-24T02:00:43+00:00

This way are able to support GENSEC_FEATURE_SIGN_PKT_HEADER also together with
GENSEC_FEATURE_SEAL.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Wed Jun 24 04:00:43 CEST 2015 on sn-devel-104

s3:librpc/gse: make use of add gssapi_get_sig_size() and gssapi_{seal,unseal,sign,check}_packet() helper functions

2015-06-23T23:03:17+00:00

This way are able to support GENSEC_FEATURE_SIGN_PKT_HEADER.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

gse_krb5: Avoid a segfault when we can not read the dedicated keytab file

2014-11-27T06:38:02+00:00

This improved code simply cleans up the memory as soon as possible,
rather than using memcmp().  Otherwise, we segfault if
krb5_kt_start_seq_get fails, as it can set the fd element in the
handle to -1.

Change-Id: Ib4821ef944a7e12cd8a891ae07dbfc0567c65495
Signed-off-by: Andrew Bartlett 
Pair-programmed-with: Garming Sam 
Signed-off-by: Garming Sam 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Thu Nov 27 07:38:02 CET 2014 on sn-devel-104

auth/gensec: introduce gensec_internal.h

2013-08-10T07:19:02+00:00

We should treat most gensec related structures private.

It's a long way, but this is a start.

Signed-off-by: Stefan Metzmacher 

Reviewed-by: Andrew Bartlett

Correctly check for errors in strlower_m() returns.

2012-08-09T19:08:18+00:00

lib/param: Move all enum declarations to lib/param

2012-07-24T09:01:17+00:00

This is in preperation for the parameter table being made common.

Andrew Bartlett

Pair-Programmed-With: Andrew Tridgell

gse: Use the smb_gss_oid_equal wrapper.

2012-05-23T14:51:51+00:00

Signed-off-by: Andreas Schneider

s3:gse: implement gensec_gse_expire_time()

2012-05-17T18:04:33+00:00

metze