summaryrefslogtreecommitdiffstats
path: root/lib/libgssapi
Commit message (Collapse)AuthorAgeFilesLines
* mdoc: add missing -width argument to Bl -tag.joel2012-06-0836-112/+112
|
* Remove repeated words.joel2012-06-052-2/+2
|
* - Use __NO_TLS preprocessor value to make assumptions about TLS supportstas2012-04-081-1/+1
| | | | on a platform.
* Remove trailing whitespace per mdoc lint warningeadler2012-03-293-4/+4
| | | | | | | Disussed with: gavin No objection from: doc Approved by: joel MFC after: 3 days
* mdoc: terminate quoted strings.joel2012-03-261-1/+1
| | | | Reviewed by: brueffer
* - Update FreeBSD Heimdal distribution to version 1.5.1. This also bringsstas2012-03-223-0/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | several new kerberos related libraries and applications to FreeBSD: o kgetcred(1) allows one to manually get a ticket for a particular service. o kf(1) securily forwards ticket to another host through an authenticated and encrypted stream. o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1) and other user kerberos operations. klist and kswitch are just symlinks to kcc(1) now. o kswitch(1) allows you to easily switch between kerberos credentials if you're running KCM. o hxtool(1) is a certificate management tool to use with PKINIT. o string2key(1) maps a password into key. o kdigest(8) is a userland tool to access the KDC's digest interface. o kimpersonate(8) creates a "fake" ticket for a service. We also now install manpages for some lirbaries that were not installed before, libheimntlm and libhx509. - The new HEIMDAL version no longer supports Kerberos 4. All users are recommended to switch to Kerberos 5. - Weak ciphers are now disabled by default. To enable DES support (used by telnet(8)), use "allow_weak_crypto" option in krb5.conf. - libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings disabled due to the function they use (krb5_get_err_text(3)) being deprecated. I plan to work on this next. - Heimdal's KDC now require sqlite to operate. We use the bundled version and install it as libheimsqlite. If some other FreeBSD components will require it in the future we can rename it to libbsdsqlite and use for these components as well. - This is not a latest Heimdal version, the new one was released while I was working on the update. I will update it to 1.5.2 soon, as it fixes some important bugs and security issues.
* Convert files to UTF-8 and add some copyright markers where missing.uqs2012-01-073-5/+5
|
* Fix whitespace inconsistencies found in homegrown Symbol.maps.ed2011-10-071-1/+1
|
* mdoc: drop redundant .Pp and .LP callsuqs2010-10-081-1/+0
| | | | They have no effect when coming in pairs, or before .Bl/.Bd
* Fix typos, spelling, formatting and mdoc mistakes found by Nobuyuki whilejoel2010-08-163-3/+3
| | | | | | translating these manual pages. Minor corrections by me. Submitted by: Nobuyuki Koganemaru <n-kogane@syd.odn.ne.jp>
* mdoc cleanupuqs2010-06-021-1/+1
| | | | | | | Garbage collect unused sections, macros and arguments. Fix prologue and remove empty lines. Found by: mdocml
* mdoc: order prologue macros consistently by Dd/Dt/Osuqs2010-04-1434-34/+34
| | | | | | | | Although groff_mdoc(7) gives another impression, this is the ordering most widely used and also required by mdocml/mandoc. Reviewed by: ru Approved by: philip, ed (mentors)
* Fix several typos in macros or macro misusage.uqs2010-03-122-1/+2
| | | | | | Found by: make manlint Reviewed by: ru Approved by: philip (mentor)
* Correct the HISTORY section of these man pages to show when the function,gavin2010-01-2636-72/+72
| | | | | | | not the "manual page example" was introduced. Approved by: ed (mentor, implicit) MFC after: 1 week
* Build lib/ with WARNS=6 by default.ed2010-01-021-1/+0
| | | | | | | | | Similar to libexec/, do the same with lib/. Make WARNS=6 the norm and lower it when needed. I'm setting WARNS?=0 for secure/. It seems secure/ includes the Makefile.inc provided by lib/. I'm not going to touch that directory. Most of the code there is contributed anyway.
* (S)LIST_HEAD_INITIALIZER takes a (S)LIST_HEAD as an argument.antoine2009-12-281-1/+1
| | | | | | | | | Fix some wrong usages. Note: this does not affect generated binaries as this argument is not used. PR: 137213 Submitted by: Eygene Ryabinkin (initial version) MFC after: 1 month
* Add an implementation of the RPCSEC_GSS authentication protocol for RPC. Thisdfr2008-08-067-0/+99
| | | | | | | | is based on an old implementation from the University of Michigan with lots of changes and fixes by me and the addition of a Solaris-compatible API. Sponsored by: Isilon Systems Reviewed by: alfred
* Fix conflicts after heimdal-1.1 import and add build infrastructure. Importdfr2008-05-0754-332/+1930
| | | | all non-style changes made by heimdal to our own libgssapi.
* When receiving delegated credentials, initialise our cred's linked list.dfr2008-04-301-1/+5
| | | | | | | Add a bit more sanity checking for GSS-API mechanisms that claim to have delegated creds but don't actually return a cred handle. MFC after: 2 weeks
* Use global implementation of _gss_oid_equal.dfr2008-04-301-9/+1
| | | | MFC after: 2 weeks
* Allow null oids in _gss_oid_equal().dfr2008-04-301-0/+5
| | | | MFC after: 2 weeks
* Make sure GSS-API mechanisms are loaded if gss_acquire_cred is calleddfr2007-11-281-4/+3
| | | | | | | with a null mechanism list. PR: misc/117349 Submitted by: Sean McNeil <sean at mcneil dot com>
* While checking over the libraries for 7.0-REL Kris found the followingkensmith2007-11-201-1/+1
| | | | | | | | | | | libraries had not had their versions bumped relative to 6.3-REL but had indeed been changed. We need to bump their version so they can be properly added to the compat6x port: libasn1.so.8 libgssapi.so.8 libhdb.so.8 libkadm5clnt.so.8 libkadm5srv.so.8 libkafs5.so.8 libkrb5.so.8 libobjc.so.2 MFC After: 1 day
* Remove an extra (commented out) .Sh HISTORY section heading, to avoidkeramida2007-10-301-3/+1
| | | | | | | the risk of "shadowing" the following .El request, and delete an empty line to fix mdoc warnings. MFC after: 3 days
* Remove an extra (commented out) .Sh HISTORY section heading, to avoidkeramida2007-10-301-4/+2
| | | | | | | the risk of "shadowing" the following .El request, strip eol spaces and delete an empty line to fix mdoc warnings. MFC after: 3 days
* Change a .PP request to a valid .Pp mdoc request, and remove an extrakeramida2007-10-302-6/+3
| | | | | | (but commented out) .Sh HISTORY section heading. MFC after: 3 days
* Remove duplicate (but commented out) .Sh HISTORY section heading.keramida2007-10-3028-56/+28
| | | | | | | It almost "shadows" the ending .El request of a list, which seems to have caused mdoc buglets in some gss_*.3 manpages. MFC after: 3 days
* Remove duplicate (but commented out) .Sh HISTORY section headingkeramida2007-10-302-4/+4
| | | | | | and add a missing .El request. MFC after: 3 days
* If the mech_type argument to gss_display_status is null, use a defaultdfr2007-07-051-1/+10
| | | | | | mechanism. Approved by: re (kensmith)
* Merge fixes back from heimdal.dfr2007-06-305-63/+154
| | | | Approved by: re (kensmith)
* According to the documentation mech_type for gss_init_sec_context() mayharti2007-06-141-1/+9
| | | | | | | | | | be passed as GSS_C_NO_OID in which case a default mech should be used. This case was not handled and leads to core dumps when using nss_ldap. Now use the first mech in this case. When there is no mechanism available return an error (this part is taken from the PR). PR: 113266 Submitted by: Eirik Nygaard <eirikald@pvv.ntnu.no> (partly)
* Add include directives for string.h and stdlib.h to get proper functionkan2007-04-0411-0/+12
| | | | prototypess of memset, memcpy and malloc respectively.
* Include string.h to get proper memcpy prototype.kan2007-04-041-0/+1
|
* The function isspace does not take a string argument. I have no idea howdfr2006-02-041-3/+3
| | | | this compiled before; it only worked by accident.
* Move the Internet Society copyright message so that it appears in thedfr2006-01-2535-910/+910
| | | | formatted page as well as the source.
* Use the correct shared-library version number (the same as the one useddfr2006-01-011-1/+1
| | | | | by the standalone version of heimdal GSS-API). If any compat issues arise, I may increment the version number once more.
* Add a new extensible GSS-API layer which can support GSS-API plugins,dfr2005-12-2985-0/+10704
similar the the Solaris implementation. Repackage the krb5 GSS mechanism as a plugin library for the new implementation. This also includes a comprehensive set of manpages for the GSS-API functions with text mostly taken from the RFC. Reviewed by: Love Hörnquist Åstrand <lha@it.su.se>, ru (build system), des (openssh parts)
OpenPOWER on IntegriCloud