[Heimdal-source-changes] [heimdal/heimdal] 9f3d9e: Add gss_duplicate_oid_set()

Luke Howard noreply at github.com
Tis Apr 21 07:19:55 CEST 2020


  Branch: refs/heads/pull/695
  Home:   https://github.com/heimdal/heimdal
  Commit: 9f3d9e1a0a6c2173b44f019b46134f0da2a00797
      https://github.com/heimdal/heimdal/commit/9f3d9e1a0a6c2173b44f019b46134f0da2a00797
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-04-21 (Tue, 21 Apr 2020)

  Changed paths:
    M lib/gssapi/Makefile.am
    M lib/gssapi/NTMakefile
    M lib/gssapi/gssapi/gssapi.h
    M lib/gssapi/libgssapi-exports.def
    A lib/gssapi/mech/gss_duplicate_oid_set.c
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  Add gss_duplicate_oid_set()


  Commit: 2ec9e1704287a7a31c696fd92c577eb8fb88b7bc
      https://github.com/heimdal/heimdal/commit/2ec9e1704287a7a31c696fd92c577eb8fb88b7bc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2020-04-21 (Tue, 21 Apr 2020)

  Changed paths:
    M lib/gssapi/mech/gss_add_oid_set_member.c

  Log Message:
  -----------
  gss: intern OID before adding to OID set

gss_add_oid_set_member() should according to RFC2744 add a copy of the OID to
the set; the current implementation just stored a pointer (which may not be
stable). As we have _gss_intern_oid(), call that before adding.


  Commit: 9f5e7507bbb9bdb41883ea47a235b01de23ce7db
      https://github.com/heimdal/heimdal/commit/9f5e7507bbb9bdb41883ea47a235b01de23ce7db
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2020-04-21 (Tue, 21 Apr 2020)

  Changed paths:
    M lib/gssapi/Makefile.am
    M lib/gssapi/NTMakefile
    M lib/gssapi/gssapi_mech.h
    M lib/gssapi/krb5/external.c
    M lib/gssapi/mech/cred.c
    M lib/gssapi/mech/cred.h
    M lib/gssapi/mech/gss_acquire_cred_from.c
    M lib/gssapi/mech/gss_add_cred_from.c
    M lib/gssapi/mech/gss_cred.c
    M lib/gssapi/mech/gss_get_neg_mechs.c
    M lib/gssapi/mech/gss_inquire_cred.c
    M lib/gssapi/mech/gss_mech_switch.c
    M lib/gssapi/mech/gss_set_neg_mechs.c
    M lib/gssapi/netlogon/external.c
    M lib/gssapi/ntlm/external.c
    M lib/gssapi/spnego/accept_sec_context.c
    M lib/gssapi/spnego/compat.c
    R lib/gssapi/spnego/cred_stubs.c
    M lib/gssapi/spnego/external.c
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  Properly implement neg_mechs & GM_USE_MG_CRED

SPNEGO was already using union creds.  Now make the mechglue know about
it, delete all of the cred-related SPNEGO stubs that are now not called
(lib/gssapi/spnego/cred_stubs.c), and implement gss_get/set_neg_mechs()
by storing the OID set in the union cred.


  Commit: 51a701b396fa3e6c0972b2af5e05be501a3f1215
      https://github.com/heimdal/heimdal/commit/51a701b396fa3e6c0972b2af5e05be501a3f1215
  Author: Luke Howard <lukeh at padl.com>
  Date:   2020-04-21 (Tue, 21 Apr 2020)

  Changed paths:
    M lib/gssapi/gssapi/gssapi.h
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/mech/cred.c
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  gss: remove gss_release_cred_by_mech()

gss_release_cred_by_mech() was previously used by SPNEGO's implementation of
gss_set_neg_mechs(). This is now implemented in the mechanism glue. As we never
shipped gss_release_cred_by_mech(), it is safe to remove it and its exported
symbol.


Compare: https://github.com/heimdal/heimdal/compare/9f3d9e1a0a6c%5E...51a701b396fa


More information about the Heimdal-source-changes mailing list