Luke Howard [Fri, 8 Oct 2010 13:59:17 +0000 (15:59 +0200)]
initial libradsec port
Luke Howard [Fri, 8 Oct 2010 12:03:20 +0000 (14:03 +0200)]
fix constant nit
Luke Howard [Wed, 6 Oct 2010 21:21:07 +0000 (23:21 +0200)]
check for libradsec
Luke Howard [Wed, 6 Oct 2010 21:02:42 +0000 (23:02 +0200)]
cleanup exception handling
Luke Howard [Wed, 6 Oct 2010 20:04:51 +0000 (22:04 +0200)]
move to .22 OID arc
Luke Howard [Tue, 5 Oct 2010 09:29:36 +0000 (11:29 +0200)]
s/1.3.6.1.4.1.5322.21/1.3.6.1.4.1.5322.22
Luke Howard [Mon, 4 Oct 2010 10:43:24 +0000 (12:43 +0200)]
correctly propagate expiry time from reauth ticket
Luke Howard [Mon, 4 Oct 2010 10:25:36 +0000 (12:25 +0200)]
marshal server name in partial contexts
Luke Howard [Sat, 2 Oct 2010 20:22:27 +0000 (22:22 +0200)]
return EINVAL if no context
Luke Howard [Sat, 2 Oct 2010 20:19:10 +0000 (22:19 +0200)]
add temporary NOTES file
Luke Howard [Sat, 2 Oct 2010 20:18:59 +0000 (22:18 +0200)]
more locking cleanups
Luke Howard [Sat, 2 Oct 2010 20:16:51 +0000 (22:16 +0200)]
acquire lock in gss_wrap_iov_length()
Luke Howard [Sat, 2 Oct 2010 20:15:58 +0000 (22:15 +0200)]
acquire lock in gss_wrap_size_limit
Luke Howard [Fri, 1 Oct 2010 01:22:30 +0000 (03:22 +0200)]
more cleanups, locking-related
Luke Howard [Fri, 1 Oct 2010 01:08:53 +0000 (03:08 +0200)]
various mutex-related cleanups
Luke Howard [Thu, 30 Sep 2010 15:15:47 +0000 (17:15 +0200)]
beginnings of better error handling
Luke Howard [Thu, 30 Sep 2010 10:30:46 +0000 (12:30 +0200)]
Make sure libradius config file follows AVPs
Luke Howard [Wed, 29 Sep 2010 23:02:25 +0000 (01:02 +0200)]
eliminate non-AES EAP mechanisms
Luke Howard [Wed, 29 Sep 2010 16:29:30 +0000 (18:29 +0200)]
use a more efficient encoding of RADIUS AVPs
Luke Howard [Wed, 29 Sep 2010 13:15:53 +0000 (15:15 +0200)]
add some notes to README
Luke Howard [Wed, 29 Sep 2010 13:09:20 +0000 (15:09 +0200)]
lock creds in right spot in accept_sec_context
Luke Howard [Wed, 29 Sep 2010 11:16:08 +0000 (13:16 +0200)]
cleanup
Luke Howard [Wed, 29 Sep 2010 10:47:22 +0000 (12:47 +0200)]
Don't expose the enctype-less mech OID
Luke Howard [Tue, 28 Sep 2010 12:17:41 +0000 (14:17 +0200)]
better error handling in RADIUS AD plugin
Luke Howard [Tue, 28 Sep 2010 08:58:36 +0000 (10:58 +0200)]
SASL mech should be EAP
Luke Howard [Tue, 28 Sep 2010 08:58:06 +0000 (10:58 +0200)]
fix time of use reression in accept_sec_context
Luke Howard [Tue, 28 Sep 2010 07:38:29 +0000 (09:38 +0200)]
don't enter cleanup handler without locking cred
Luke Howard [Mon, 27 Sep 2010 23:29:56 +0000 (01:29 +0200)]
cleanup
Luke Howard [Mon, 27 Sep 2010 23:18:22 +0000 (01:18 +0200)]
be careful to lock cred before using it
Luke Howard [Mon, 27 Sep 2010 23:18:09 +0000 (01:18 +0200)]
reorder some things for future reauth cred support
Luke Howard [Mon, 27 Sep 2010 23:14:27 +0000 (01:14 +0200)]
comments
Luke Howard [Mon, 27 Sep 2010 23:11:36 +0000 (01:11 +0200)]
allow reauth code to use default credentials
Luke Howard [Mon, 27 Sep 2010 18:01:22 +0000 (20:01 +0200)]
Don't allow us to acquire initiator cred without password for now
Luke Howard [Mon, 27 Sep 2010 12:39:10 +0000 (14:39 +0200)]
set minor on gss_internal_release_oid
Luke Howard [Sun, 26 Sep 2010 16:28:55 +0000 (18:28 +0200)]
do the right lucid thing for accepor subkeys
Luke Howard [Sun, 26 Sep 2010 16:25:41 +0000 (18:25 +0200)]
support for lucid export
Luke Howard [Sun, 26 Sep 2010 14:59:31 +0000 (16:59 +0200)]
better error handling in attr context initialisation
Luke Howard [Sun, 26 Sep 2010 14:56:24 +0000 (16:56 +0200)]
plug a leak
Luke Howard [Sun, 26 Sep 2010 14:41:49 +0000 (16:41 +0200)]
defer attr provider initialisation, C++ is expensive
Luke Howard [Sun, 26 Sep 2010 10:11:45 +0000 (12:11 +0200)]
remove GSS_C_MA_DELEG_CRED
Luke Howard [Sun, 26 Sep 2010 08:23:42 +0000 (10:23 +0200)]
make SASL arguments optional
Luke Howard [Sat, 25 Sep 2010 23:10:33 +0000 (01:10 +0200)]
for now, fake that we provide mutual auth
Luke Howard [Sat, 25 Sep 2010 21:56:44 +0000 (23:56 +0200)]
use urn:x-radius: namespace
Luke Howard [Sat, 25 Sep 2010 21:51:43 +0000 (23:51 +0200)]
check for gss_krb5_import_cred
Luke Howard [Sat, 25 Sep 2010 21:30:52 +0000 (23:30 +0200)]
don't advertise mutual auth for now becuase it's not implemented
Luke Howard [Sat, 25 Sep 2010 21:06:56 +0000 (23:06 +0200)]
fix pointer error
Luke Howard [Sat, 25 Sep 2010 20:00:31 +0000 (22:00 +0200)]
support gss_inquire_attrs_for_mech
Luke Howard [Sat, 25 Sep 2010 16:38:20 +0000 (18:38 +0200)]
better error checking
Luke Howard [Sat, 25 Sep 2010 16:35:07 +0000 (18:35 +0200)]
don't advertise EAP parent OID as a SASL mech
Luke Howard [Sat, 25 Sep 2010 16:16:30 +0000 (18:16 +0200)]
Hang default cred off credential object
Luke Howard [Sat, 25 Sep 2010 14:52:47 +0000 (16:52 +0200)]
cleanup, don't register server EAP methods
Luke Howard [Sat, 25 Sep 2010 13:46:34 +0000 (15:46 +0200)]
add some SASL descriptions
Luke Howard [Sat, 25 Sep 2010 11:27:29 +0000 (13:27 +0200)]
GS2 helpers
Luke Howard [Fri, 24 Sep 2010 22:38:19 +0000 (00:38 +0200)]
fix build error
Luke Howard [Fri, 24 Sep 2010 15:55:30 +0000 (17:55 +0200)]
Merge branch 'master' of ssh://lhoward@moonshot.suchdamage.org:822/srv/git/moonshot
Conflicts:
cyrus-sasl
Luke Howard [Fri, 24 Sep 2010 15:25:25 +0000 (17:25 +0200)]
use pkgconfig
Luke Howard [Fri, 24 Sep 2010 14:42:16 +0000 (16:42 +0200)]
If GSS_C_NO_CREDENTIAL is passed to the initiator then
we should acquire default credentials handle
Luke Howard [Fri, 24 Sep 2010 12:02:29 +0000 (14:02 +0200)]
check we have an initiator credential
Luke Howard [Fri, 24 Sep 2010 09:28:28 +0000 (11:28 +0200)]
fix typo reression
Luke Howard [Fri, 24 Sep 2010 09:27:56 +0000 (11:27 +0200)]
cleanup
Luke Howard [Thu, 23 Sep 2010 23:42:30 +0000 (01:42 +0200)]
install gssapi_eap.h
Luke Howard [Thu, 23 Sep 2010 23:42:23 +0000 (01:42 +0200)]
Merge branch 'fastreauth'
Conflicts:
mech_eap/util_cred.c
Luke Howard [Thu, 23 Sep 2010 23:23:58 +0000 (01:23 +0200)]
cleanup
Luke Howard [Thu, 23 Sep 2010 23:00:03 +0000 (01:00 +0200)]
some cleanups, reordering
Luke Howard [Thu, 23 Sep 2010 22:14:58 +0000 (00:14 +0200)]
cleanup
Luke Howard [Thu, 23 Sep 2010 18:10:36 +0000 (20:10 +0200)]
make reauth support conditionaly compilable
Luke Howard [Thu, 23 Sep 2010 15:32:21 +0000 (17:32 +0200)]
Pass GSS_C_DCE_STYLE to wrap/unwrap
Luke Howard [Thu, 23 Sep 2010 15:00:49 +0000 (17:00 +0200)]
cleanup
Luke Howard [Thu, 23 Sep 2010 14:54:10 +0000 (16:54 +0200)]
Use AD-KDCIssued to protect RADIUS authdata. Cleanup.
Luke Howard [Thu, 23 Sep 2010 11:35:18 +0000 (13:35 +0200)]
gss_store_cred implementation
Luke Howard [Thu, 23 Sep 2010 09:54:01 +0000 (11:54 +0200)]
cleanup
Luke Howard [Thu, 23 Sep 2010 08:55:03 +0000 (10:55 +0200)]
fix some warnings
Luke Howard [Thu, 23 Sep 2010 08:53:16 +0000 (10:53 +0200)]
get reauthenticating working
Luke Howard [Wed, 22 Sep 2010 23:08:37 +0000 (01:08 +0200)]
hook in initiator reauth
Luke Howard [Wed, 22 Sep 2010 22:12:23 +0000 (00:12 +0200)]
some nits
Luke Howard [Wed, 22 Sep 2010 21:58:24 +0000 (23:58 +0200)]
preliminary work on fast reauth
Luke Howard [Wed, 22 Sep 2010 20:10:54 +0000 (22:10 +0200)]
use correct free
Luke Howard [Wed, 22 Sep 2010 20:10:25 +0000 (22:10 +0200)]
use correct free
Luke Howard [Wed, 22 Sep 2010 20:09:55 +0000 (22:09 +0200)]
some work on fast reauth
Luke Howard [Wed, 22 Sep 2010 13:39:29 +0000 (15:39 +0200)]
cleanup
Luke Howard [Wed, 22 Sep 2010 13:37:32 +0000 (15:37 +0200)]
Honour RADIUS session timeout
Luke Howard [Wed, 22 Sep 2010 13:31:16 +0000 (15:31 +0200)]
Brace the static cast stuff in #ifdef __APPLE__
Luke Howard [Wed, 22 Sep 2010 13:22:24 +0000 (15:22 +0200)]
Support VENDOR_ATTR_GSS_ACCEPTOR_SERVICE_SPECIFIC
Luke Howard [Wed, 22 Sep 2010 12:57:44 +0000 (14:57 +0200)]
Fix some build errors, and build with flat_namespace
Luke Howard [Wed, 22 Sep 2010 08:04:26 +0000 (10:04 +0200)]
Make it possible to disable Shibboleth
Luke Howard [Tue, 21 Sep 2010 22:39:59 +0000 (00:39 +0200)]
cleanup attribute names for radius
Luke Howard [Tue, 21 Sep 2010 17:26:44 +0000 (19:26 +0200)]
cleanup radius attr prefixes
Luke Howard [Tue, 21 Sep 2010 17:18:24 +0000 (19:18 +0200)]
use urn:radius: prefix
Luke Howard [Tue, 21 Sep 2010 17:05:50 +0000 (19:05 +0200)]
return RADIUS attributes as integers
Luke Howard [Tue, 21 Sep 2010 16:09:59 +0000 (18:09 +0200)]
some fixes for attribute handling
Luke Howard [Tue, 21 Sep 2010 12:54:06 +0000 (14:54 +0200)]
fix printable predicate
Luke Howard [Tue, 21 Sep 2010 12:51:24 +0000 (14:51 +0200)]
don't expose unauthenticated initiator identity
Luke Howard [Tue, 21 Sep 2010 12:42:04 +0000 (14:42 +0200)]
set acceptor name
Luke Howard [Tue, 21 Sep 2010 11:55:17 +0000 (13:55 +0200)]
Discard initiator name from identity packet because
it is unauthenticated
Luke Howard [Tue, 21 Sep 2010 11:12:58 +0000 (13:12 +0200)]
disable shib test for now
Luke Howard [Tue, 21 Sep 2010 11:11:16 +0000 (13:11 +0200)]
some preliminary RADIUS attribute serialisation
Luke Howard [Tue, 21 Sep 2010 10:49:23 +0000 (12:49 +0200)]
Merge branch 'oldradius'
Conflicts:
mech_eap/accept_sec_context.c
mech_eap/init_sec_context.c
Luke Howard [Tue, 21 Sep 2010 10:38:54 +0000 (12:38 +0200)]
cleanup key derivation on acceptor
Luke Howard [Tue, 21 Sep 2010 09:01:32 +0000 (11:01 +0200)]
Some preliminary exposing of attributes here
Luke Howard [Tue, 21 Sep 2010 06:55:38 +0000 (08:55 +0200)]
import radius state