summaryrefslogtreecommitdiff
path: root/lib/libgssapi
Commit message (Collapse)AuthorAgeFilesLines
* MFC r312505:Enji Cooper2017-02-111-1/+1
| | | | | | | | | Use SRCTOP-relative paths to other directories instead of .CURDIR-relative ones This simplifies pathing in make/displayed output Notes: svn path=/stable/10/; revision=313625
* MFC 297942:Pedro F. Giffuni2016-04-209-10/+15
| | | | | | | | | libgssapi: avoid NULL pointer dereferences. While here also use NULL instead of zero for pointers. Notes: svn path=/stable/10/; revision=298314
* mdoc: add missing -width argument to Bl -tag.Joel Dahl2012-06-0836-112/+112
| | | | Notes: svn path=/head/; revision=236746
* Remove repeated words.Joel Dahl2012-06-052-2/+2
| | | | Notes: svn path=/head/; revision=236626
* - Use __NO_TLS preprocessor value to make assumptions about TLS supportStanislav Sedov2012-04-081-1/+1
| | | | | | | on a platform. Notes: svn path=/head/; revision=234011
* Remove trailing whitespace per mdoc lint warningEitan Adler2012-03-293-4/+4
| | | | | | | | | | Disussed with: gavin No objection from: doc Approved by: joel MFC after: 3 days Notes: svn path=/head/; revision=233648
* mdoc: terminate quoted strings.Joel Dahl2012-03-261-1/+1
| | | | | | | Reviewed by: brueffer Notes: svn path=/head/; revision=233510
* - Update FreeBSD Heimdal distribution to version 1.5.1. This also bringsStanislav Sedov2012-03-223-0/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | several new kerberos related libraries and applications to FreeBSD: o kgetcred(1) allows one to manually get a ticket for a particular service. o kf(1) securily forwards ticket to another host through an authenticated and encrypted stream. o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1) and other user kerberos operations. klist and kswitch are just symlinks to kcc(1) now. o kswitch(1) allows you to easily switch between kerberos credentials if you're running KCM. o hxtool(1) is a certificate management tool to use with PKINIT. o string2key(1) maps a password into key. o kdigest(8) is a userland tool to access the KDC's digest interface. o kimpersonate(8) creates a "fake" ticket for a service. We also now install manpages for some lirbaries that were not installed before, libheimntlm and libhx509. - The new HEIMDAL version no longer supports Kerberos 4. All users are recommended to switch to Kerberos 5. - Weak ciphers are now disabled by default. To enable DES support (used by telnet(8)), use "allow_weak_crypto" option in krb5.conf. - libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings disabled due to the function they use (krb5_get_err_text(3)) being deprecated. I plan to work on this next. - Heimdal's KDC now require sqlite to operate. We use the bundled version and install it as libheimsqlite. If some other FreeBSD components will require it in the future we can rename it to libbsdsqlite and use for these components as well. - This is not a latest Heimdal version, the new one was released while I was working on the update. I will update it to 1.5.2 soon, as it fixes some important bugs and security issues. Notes: svn path=/head/; revision=233294
* Convert files to UTF-8 and add some copyright markers where missing.Ulrich Spörlein2012-01-073-5/+5
| | | | Notes: svn path=/head/; revision=229784
* Fix whitespace inconsistencies found in homegrown Symbol.maps.Ed Schouten2011-10-071-1/+1
| | | | Notes: svn path=/head/; revision=226111
* mdoc: drop redundant .Pp and .LP callsUlrich Spörlein2010-10-081-1/+0
| | | | | | | They have no effect when coming in pairs, or before .Bl/.Bd Notes: svn path=/head/; revision=213573
* Fix typos, spelling, formatting and mdoc mistakes found by Nobuyuki whileJoel Dahl2010-08-163-3/+3
| | | | | | | | | translating these manual pages. Minor corrections by me. Submitted by: Nobuyuki Koganemaru <n-kogane@syd.odn.ne.jp> Notes: svn path=/head/; revision=211397
* mdoc cleanupUlrich Spörlein2010-06-021-1/+1
| | | | | | | | | | Garbage collect unused sections, macros and arguments. Fix prologue and remove empty lines. Found by: mdocml Notes: svn path=/head/; revision=208732
* mdoc: order prologue macros consistently by Dd/Dt/OsUlrich Spörlein2010-04-1434-34/+34
| | | | | | | | | | | Although groff_mdoc(7) gives another impression, this is the ordering most widely used and also required by mdocml/mandoc. Reviewed by: ru Approved by: philip, ed (mentors) Notes: svn path=/head/; revision=206622
* Fix several typos in macros or macro misusage.Ulrich Spörlein2010-03-122-1/+2
| | | | | | | | | Found by: make manlint Reviewed by: ru Approved by: philip (mentor) Notes: svn path=/head/; revision=205076
* Correct the HISTORY section of these man pages to show when the function,Gavin Atkinson2010-01-2636-72/+72
| | | | | | | | | | not the "manual page example" was introduced. Approved by: ed (mentor, implicit) MFC after: 1 week Notes: svn path=/head/; revision=203027
* Build lib/ with WARNS=6 by default.Ed Schouten2010-01-021-1/+0
| | | | | | | | | | | | Similar to libexec/, do the same with lib/. Make WARNS=6 the norm and lower it when needed. I'm setting WARNS?=0 for secure/. It seems secure/ includes the Makefile.inc provided by lib/. I'm not going to touch that directory. Most of the code there is contributed anyway. Notes: svn path=/head/; revision=201381
* (S)LIST_HEAD_INITIALIZER takes a (S)LIST_HEAD as an argument.Antoine Brodin2009-12-281-1/+1
| | | | | | | | | | | | Fix some wrong usages. Note: this does not affect generated binaries as this argument is not used. PR: 137213 Submitted by: Eygene Ryabinkin (initial version) MFC after: 1 month Notes: svn path=/head/; revision=201145
* Add an implementation of the RPCSEC_GSS authentication protocol for RPC. ThisDoug Rabson2008-08-067-0/+99
| | | | | | | | | | | is based on an old implementation from the University of Michigan with lots of changes and fixes by me and the addition of a Solaris-compatible API. Sponsored by: Isilon Systems Reviewed by: alfred Notes: svn path=/head/; revision=181344
* Fix conflicts after heimdal-1.1 import and add build infrastructure. ImportDoug Rabson2008-05-0754-332/+1930
| | | | | | | all non-style changes made by heimdal to our own libgssapi. Notes: svn path=/head/; revision=178828
* When receiving delegated credentials, initialise our cred's linked list.Doug Rabson2008-04-301-1/+5
| | | | | | | | | | Add a bit more sanity checking for GSS-API mechanisms that claim to have delegated creds but don't actually return a cred handle. MFC after: 2 weeks Notes: svn path=/head/; revision=178692
* Use global implementation of _gss_oid_equal.Doug Rabson2008-04-301-9/+1
| | | | | | | MFC after: 2 weeks Notes: svn path=/head/; revision=178691
* Allow null oids in _gss_oid_equal().Doug Rabson2008-04-301-0/+5
| | | | | | | MFC after: 2 weeks Notes: svn path=/head/; revision=178689
* Make sure GSS-API mechanisms are loaded if gss_acquire_cred is calledDoug Rabson2007-11-281-4/+3
| | | | | | | | | | with a null mechanism list. PR: misc/117349 Submitted by: Sean McNeil <sean at mcneil dot com> Notes: svn path=/head/; revision=174013
* While checking over the libraries for 7.0-REL Kris found the followingKen Smith2007-11-201-1/+1
| | | | | | | | | | | | | | libraries had not had their versions bumped relative to 6.3-REL but had indeed been changed. We need to bump their version so they can be properly added to the compat6x port: libasn1.so.8 libgssapi.so.8 libhdb.so.8 libkadm5clnt.so.8 libkadm5srv.so.8 libkafs5.so.8 libkrb5.so.8 libobjc.so.2 MFC After: 1 day Notes: svn path=/head/; revision=173767
* Remove an extra (commented out) .Sh HISTORY section heading, to avoidGiorgos Keramidas2007-10-301-3/+1
| | | | | | | | | | the risk of "shadowing" the following .El request, and delete an empty line to fix mdoc warnings. MFC after: 3 days Notes: svn path=/head/; revision=173194
* Remove an extra (commented out) .Sh HISTORY section heading, to avoidGiorgos Keramidas2007-10-301-4/+2
| | | | | | | | | | the risk of "shadowing" the following .El request, strip eol spaces and delete an empty line to fix mdoc warnings. MFC after: 3 days Notes: svn path=/head/; revision=173190
* Change a .PP request to a valid .Pp mdoc request, and remove an extraGiorgos Keramidas2007-10-302-6/+3
| | | | | | | | | (but commented out) .Sh HISTORY section heading. MFC after: 3 days Notes: svn path=/head/; revision=173189
* Remove duplicate (but commented out) .Sh HISTORY section heading.Giorgos Keramidas2007-10-3028-56/+28
| | | | | | | | | | It almost "shadows" the ending .El request of a list, which seems to have caused mdoc buglets in some gss_*.3 manpages. MFC after: 3 days Notes: svn path=/head/; revision=173188
* Remove duplicate (but commented out) .Sh HISTORY section headingGiorgos Keramidas2007-10-302-4/+4
| | | | | | | | | and add a missing .El request. MFC after: 3 days Notes: svn path=/head/; revision=173187
* If the mech_type argument to gss_display_status is null, use a defaultDoug Rabson2007-07-051-1/+10
| | | | | | | | | mechanism. Approved by: re (kensmith) Notes: svn path=/head/; revision=171254
* Merge fixes back from heimdal.Doug Rabson2007-06-305-63/+154
| | | | | | | Approved by: re (kensmith) Notes: svn path=/head/; revision=171112
* According to the documentation mech_type for gss_init_sec_context() mayHartmut Brandt2007-06-141-1/+9
| | | | | | | | | | | | | be passed as GSS_C_NO_OID in which case a default mech should be used. This case was not handled and leads to core dumps when using nss_ldap. Now use the first mech in this case. When there is no mechanism available return an error (this part is taken from the PR). PR: 113266 Submitted by: Eirik Nygaard <eirikald@pvv.ntnu.no> (partly) Notes: svn path=/head/; revision=170734
* Add include directives for string.h and stdlib.h to get proper functionAlexander Kabaev2007-04-0411-0/+12
| | | | | | | prototypess of memset, memcpy and malloc respectively. Notes: svn path=/head/; revision=168340
* Include string.h to get proper memcpy prototype.Alexander Kabaev2007-04-041-0/+1
| | | | Notes: svn path=/head/; revision=168338
* The function isspace does not take a string argument. I have no idea howDoug Rabson2006-02-041-3/+3
| | | | | | | this compiled before; it only worked by accident. Notes: svn path=/head/; revision=155287
* Move the Internet Society copyright message so that it appears in theDoug Rabson2006-01-2535-910/+910
| | | | | | | formatted page as well as the source. Notes: svn path=/head/; revision=154811
* Use the correct shared-library version number (the same as the one usedDoug Rabson2006-01-011-1/+1
| | | | | | | | by the standalone version of heimdal GSS-API). If any compat issues arise, I may increment the version number once more. Notes: svn path=/head/; revision=153950
* Add a new extensible GSS-API layer which can support GSS-API plugins,Doug Rabson2005-12-2985-0/+10704
similar the the Solaris implementation. Repackage the krb5 GSS mechanism as a plugin library for the new implementation. This also includes a comprehensive set of manpages for the GSS-API functions with text mostly taken from the RFC. Reviewed by: Love Hörnquist Åstrand <lha@it.su.se>, ru (build system), des (openssh parts) Notes: svn path=/head/; revision=153838