mech_eap.orig
13 years agoLook for mech_eap dependencies in
Sam Hartman [Tue, 8 Mar 2011 01:46:45 +0000 (20:46 -0500)]
Look for mech_eap dependencies in

13 years agoalways sent User-Name and GSS-* attributes
Luke Howard [Fri, 4 Mar 2011 11:38:24 +0000 (22:38 +1100)]
always sent User-Name and GSS-* attributes

13 years agoupdate for latest radsec
Luke Howard [Fri, 4 Mar 2011 11:38:04 +0000 (22:38 +1100)]
update for latest radsec

13 years agoCleanup readme
Luke Howard [Thu, 3 Mar 2011 01:25:22 +0000 (12:25 +1100)]
Cleanup readme

13 years agoSent @REALM in EAP identity response
Luke Howard [Wed, 2 Mar 2011 05:46:08 +0000 (16:46 +1100)]
Sent @REALM in EAP identity response

13 years agoSome additional README notes
Luke Howard [Wed, 2 Mar 2011 02:43:16 +0000 (13:43 +1100)]
Some additional README notes

13 years agoUse anonymous name if we have not initiator identity
Luke Howard [Wed, 2 Mar 2011 02:42:34 +0000 (13:42 +1100)]
Use anonymous name if we have not initiator identity

13 years agoUse libeap API for constructing EAP identity request packet
Luke Howard [Tue, 1 Mar 2011 23:59:39 +0000 (10:59 +1100)]
Use libeap API for constructing EAP identity request packet

13 years agoForward EAP identity response as RADIUS user name
Luke Howard [Tue, 1 Mar 2011 23:53:18 +0000 (10:53 +1100)]
Forward EAP identity response as RADIUS user name

13 years agoAdd dictionary file with UKERNA attributes
Luke Howard [Tue, 1 Mar 2011 23:31:54 +0000 (10:31 +1100)]
Add dictionary file with UKERNA attributes

13 years agoDon't leak packet if request object creation fails
Luke Howard [Mon, 28 Feb 2011 23:16:24 +0000 (10:16 +1100)]
Don't leak packet if request object creation fails

13 years agoMerge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot
Luke Howard [Mon, 28 Feb 2011 23:16:07 +0000 (10:16 +1100)]
Merge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot

Conflicts:
mech_eap/accept_sec_context.c

13 years agoFix a couple of crashers in case of invalid radsec configuration
Luke Howard [Mon, 28 Feb 2011 22:54:45 +0000 (09:54 +1100)]
Fix a couple of crashers in case of invalid radsec configuration

13 years agoUpdate for libradsec changes
Luke Howard [Mon, 28 Feb 2011 22:48:15 +0000 (09:48 +1100)]
Update for libradsec changes

13 years agodisplay_status: fix logic error
Sam Hartman [Mon, 28 Feb 2011 22:04:12 +0000 (17:04 -0500)]
display_status: fix logic error

transposition of next and p

13 years agoaccept_sec_context: only destroy request if it is populated
Sam Hartman [Mon, 28 Feb 2011 21:37:24 +0000 (16:37 -0500)]
accept_sec_context: only destroy request if it is populated

13 years agoFix com_err build targets
Sam Hartman [Mon, 28 Feb 2011 16:22:44 +0000 (11:22 -0500)]
Fix com_err build targets

Make didn't have rules for building gsseap_err.c or radsec_err.c.

13 years agoDon't depend on log4shib
Sam Hartman [Sat, 26 Feb 2011 21:24:27 +0000 (16:24 -0500)]
Don't depend on log4shib

Shibboleth can be built with log4shib or log4cpp. We don't need to
make an explicit dependency; shared library search will do that for
us on most common platforms and I believe all we care about.

13 years agoUpdate copyrights for 2011
Luke Howard [Sat, 22 Jan 2011 00:18:18 +0000 (11:18 +1100)]
Update copyrights for 2011

13 years agoNote that /etc/gss/mech is not implementation-specific
Luke Howard [Sat, 22 Jan 2011 00:10:12 +0000 (11:10 +1100)]
Note that /etc/gss/mech is not implementation-specific

13 years agoupdate for libradsec API change
Luke Howard [Fri, 21 Jan 2011 23:41:46 +0000 (10:41 +1100)]
update for libradsec API change

rs_packet_create_acc_request is now rs_packet_create_auth_request

13 years agofix typo, update
Luke Howard [Sun, 9 Jan 2011 08:58:12 +0000 (19:58 +1100)]
fix typo, update

13 years agoRemove some Heimdal compatibility macros, now have patches for Heimdal
Luke Howard [Mon, 3 Jan 2011 11:55:01 +0000 (22:55 +1100)]
Remove some Heimdal compatibility macros, now have patches for Heimdal

13 years agoremove gss_any_t definition, will patch this into Heimdal
Luke Howard [Mon, 3 Jan 2011 06:16:44 +0000 (17:16 +1100)]
remove gss_any_t definition, will patch this into Heimdal

13 years agoremove @TARGET_LIBS@, they don't exist
Luke Howard [Mon, 3 Jan 2011 01:11:01 +0000 (12:11 +1100)]
remove @TARGET_LIBS@, they don't exist

13 years agoreorder shibresolver/shibsp link
Luke Howard [Mon, 3 Jan 2011 00:55:44 +0000 (11:55 +1100)]
reorder shibresolver/shibsp link

13 years agoCleanup
Luke Howard [Sun, 2 Jan 2011 09:43:10 +0000 (20:43 +1100)]
Cleanup

13 years agocorrectly construct KRB-CRED for Heimdal reauth
Luke Howard [Sun, 2 Jan 2011 09:20:07 +0000 (20:20 +1100)]
correctly construct KRB-CRED for Heimdal reauth

13 years agoMerge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot
Luke Howard [Sun, 2 Jan 2011 08:57:19 +0000 (19:57 +1100)]
Merge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot
Reauth fixes

Conflicts:
shibboleth/opensaml2
shibboleth/sp

13 years agoGet default credentials for acceptor context too
Luke Howard [Sun, 2 Jan 2011 07:45:54 +0000 (18:45 +1100)]
Get default credentials for acceptor context too

13 years agoAllow zero length but non-NULL tokens on init_sec_context
Luke Howard [Sun, 2 Jan 2011 07:33:38 +0000 (18:33 +1100)]
Allow zero length but non-NULL tokens on init_sec_context

13 years agoAdd GSSEAP_MISSING_PASSWORD minor status code
Luke Howard [Sun, 2 Jan 2011 04:25:55 +0000 (15:25 +1100)]
Add GSSEAP_MISSING_PASSWORD minor status code

13 years agoupdate for current EAP draft
Luke Howard [Sat, 1 Jan 2011 12:39:37 +0000 (23:39 +1100)]
update for current EAP draft

13 years agoupdate Lucid code for Heimdal
Luke Howard [Sat, 1 Jan 2011 12:38:10 +0000 (23:38 +1100)]
update Lucid code for Heimdal

13 years agoMore Heimdal portability cleanups
Luke Howard [Sat, 1 Jan 2011 12:18:18 +0000 (23:18 +1100)]
More Heimdal portability cleanups

13 years agoHeimdal portability cleanups
Luke Howard [Sat, 1 Jan 2011 12:16:20 +0000 (23:16 +1100)]
Heimdal portability cleanups

13 years agoupdate notes
Luke Howard [Sat, 1 Jan 2011 11:11:30 +0000 (22:11 +1100)]
update notes

13 years agoMIT build fixes
Luke Howard [Sat, 1 Jan 2011 11:07:43 +0000 (22:07 +1100)]
MIT build fixes

13 years agoMore Heimdal reauth portability
Luke Howard [Sat, 1 Jan 2011 11:05:34 +0000 (22:05 +1100)]
More Heimdal reauth portability

13 years agoFix some warnings
Luke Howard [Sat, 1 Jan 2011 10:04:41 +0000 (21:04 +1100)]
Fix some warnings

13 years agoPartial build of reauth code against Heimdal
Luke Howard [Sat, 1 Jan 2011 10:01:20 +0000 (21:01 +1100)]
Partial build of reauth code against Heimdal

13 years agoHeimdal portability fixes (except for reauth)
Luke Howard [Fri, 31 Dec 2010 08:45:03 +0000 (19:45 +1100)]
Heimdal portability fixes (except for reauth)

13 years agoEnsure checksum type is keyed
Luke Howard [Sat, 4 Dec 2010 01:52:16 +0000 (12:52 +1100)]
Ensure checksum type is keyed

13 years agoWhen processing error tokens at the initiator, verify minor status
Luke Howard [Sun, 21 Nov 2010 14:19:30 +0000 (01:19 +1100)]
When processing error tokens at the initiator, verify minor status
code is valid wire error with new IS_WIRE_ERROR macro

13 years agofix incorrect OID in sample documentation
Luke Howard [Thu, 11 Nov 2010 03:37:05 +0000 (14:37 +1100)]
fix incorrect OID in sample documentation

13 years agonote sample radsec.conf
Luke Howard [Thu, 11 Nov 2010 03:36:16 +0000 (14:36 +1100)]
note sample radsec.conf

13 years agogssEapCreateAttrContext should not mutate context fields directly
Luke Howard [Tue, 26 Oct 2010 23:22:36 +0000 (10:22 +1100)]
gssEapCreateAttrContext should not mutate context fields directly

13 years agoSet *conf_state on successful return from
Luke Howard [Tue, 26 Oct 2010 22:00:42 +0000 (09:00 +1100)]
Set *conf_state on successful return from
gss_krb5int_make_seal_token_v3_iov, fixing a case where it wasn't
always set by gss_wrap_iov.  Patch from aberry@likewise.com.

13 years agocleanup
Luke Howard [Mon, 25 Oct 2010 22:42:50 +0000 (09:42 +1100)]
cleanup

13 years agoEnable libeap debugging iff GSSEAP_DEBUG defined
Luke Howard [Mon, 25 Oct 2010 22:35:20 +0000 (09:35 +1100)]
Enable libeap debugging iff GSSEAP_DEBUG defined

13 years agoIf we can't make reauth creds, return GSS_S_UNAVAILABLE
Luke Howard [Mon, 25 Oct 2010 21:34:42 +0000 (08:34 +1100)]
If we can't make reauth creds, return GSS_S_UNAVAILABLE

13 years agoexport gssspi_set_cred_option
Luke Howard [Mon, 25 Oct 2010 21:12:37 +0000 (08:12 +1100)]
export gssspi_set_cred_option

13 years agoremove unnecessary namespace qualification
Luke Howard [Mon, 25 Oct 2010 12:06:23 +0000 (23:06 +1100)]
remove unnecessary namespace qualification

13 years agoset cred->flags from usage before testing
Luke Howard [Mon, 25 Oct 2010 11:45:21 +0000 (22:45 +1100)]
set cred->flags from usage before testing

13 years agoremove some XXX markers
Luke Howard [Mon, 25 Oct 2010 11:40:47 +0000 (22:40 +1100)]
remove some XXX markers

13 years agoCleanup
Luke Howard [Mon, 25 Oct 2010 06:59:40 +0000 (17:59 +1100)]
Cleanup

13 years agoSet GSS_S_CALL_INACCESSIBLE_READ for NULL params
Luke Howard [Mon, 25 Oct 2010 06:59:14 +0000 (17:59 +1100)]
Set GSS_S_CALL_INACCESSIBLE_READ for NULL params

13 years agodocument state constants
Luke Howard [Fri, 22 Oct 2010 01:14:41 +0000 (12:14 +1100)]
document state constants

13 years agocleanup some symbolic constants
Luke Howard [Fri, 22 Oct 2010 01:11:53 +0000 (12:11 +1100)]
cleanup some symbolic constants

13 years agocleanup
Luke Howard [Thu, 21 Oct 2010 23:18:08 +0000 (10:18 +1100)]
cleanup

13 years agoEnable rs_conn_select_server code
Luke Howard [Thu, 21 Oct 2010 23:05:37 +0000 (10:05 +1100)]
Enable rs_conn_select_server code

13 years agocleanup
Luke Howard [Thu, 21 Oct 2010 13:39:27 +0000 (00:39 +1100)]
cleanup

13 years agomap Shibboleth/OpenSAML exceptions to mech errors
Luke Howard [Thu, 21 Oct 2010 13:36:25 +0000 (00:36 +1100)]
map Shibboleth/OpenSAML exceptions to mech errors

13 years agobetter error code propagation when creating attr contexts
Luke Howard [Thu, 21 Oct 2010 12:47:43 +0000 (23:47 +1100)]
better error code propagation when creating attr contexts

13 years agoReturn an error if attribute context initialisation fails
Luke Howard [Thu, 21 Oct 2010 12:17:31 +0000 (23:17 +1100)]
Return an error if attribute context initialisation fails

13 years agocatch resolver exceptions
Luke Howard [Thu, 21 Oct 2010 04:45:51 +0000 (15:45 +1100)]
catch resolver exceptions

13 years agocleanup
Luke Howard [Thu, 21 Oct 2010 04:45:48 +0000 (15:45 +1100)]
cleanup

13 years agofix some build issues with current resolver
Luke Howard [Thu, 21 Oct 2010 04:36:47 +0000 (15:36 +1100)]
fix some build issues with current resolver

13 years agoBuild with new C++ clean libeap
Luke Howard [Tue, 19 Oct 2010 13:08:02 +0000 (00:08 +1100)]
Build with new C++ clean libeap

13 years agoMerge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot
Luke Howard [Tue, 19 Oct 2010 12:08:57 +0000 (23:08 +1100)]
Merge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot

Conflicts:
shibboleth/opensaml2
shibboleth/xmltooling

13 years agofix uninitialised return code in encodeExtensions
Luke Howard [Mon, 18 Oct 2010 22:04:59 +0000 (09:04 +1100)]
fix uninitialised return code in encodeExtensions

13 years agoremove reflect error
Luke Howard [Sat, 16 Oct 2010 21:06:55 +0000 (08:06 +1100)]
remove reflect error

13 years agoadd some function headers
Luke Howard [Sat, 16 Oct 2010 08:55:23 +0000 (19:55 +1100)]
add some function headers

13 years agocleanup
Luke Howard [Sat, 16 Oct 2010 07:39:08 +0000 (18:39 +1100)]
cleanup

13 years agocleanup
Luke Howard [Sat, 16 Oct 2010 07:34:06 +0000 (18:34 +1100)]
cleanup

13 years agoupdate for libradsec API cleanups
Luke Howard [Sat, 16 Oct 2010 06:26:02 +0000 (17:26 +1100)]
update for libradsec API cleanups

13 years agofix comment explaining key derivation
Luke Howard [Fri, 15 Oct 2010 06:59:50 +0000 (17:59 +1100)]
fix comment explaining key derivation

13 years agoattrbutes internal to the GSS EAP mechanism (not keys) can now
Luke Howard [Wed, 13 Oct 2010 20:03:20 +0000 (07:03 +1100)]
attrbutes internal to the GSS EAP mechanism (not keys) can now
be requested, but they are not enumerated, nor can they be set
or deleted

13 years agoadd set/delete attribute to SAML provider
Luke Howard [Wed, 13 Oct 2010 04:07:52 +0000 (15:07 +1100)]
add set/delete attribute to SAML provider

13 years agoproperly support multiple attribute statements
Luke Howard [Wed, 13 Oct 2010 00:51:09 +0000 (11:51 +1100)]
properly support multiple attribute statements

13 years agocleanup, fix some uninitialised variable warnings
Luke Howard [Wed, 13 Oct 2010 00:09:52 +0000 (11:09 +1100)]
cleanup, fix some uninitialised variable warnings

13 years agocopy name flags
Luke Howard [Tue, 12 Oct 2010 22:19:05 +0000 (09:19 +1100)]
copy name flags

13 years agomore error reporting work
Luke Howard [Tue, 12 Oct 2010 21:12:57 +0000 (08:12 +1100)]
more error reporting work

13 years agoguess acceptor service name if none specified
Luke Howard [Tue, 12 Oct 2010 11:22:57 +0000 (22:22 +1100)]
guess acceptor service name if none specified

13 years agomore error handling improvements
Luke Howard [Tue, 12 Oct 2010 11:11:07 +0000 (22:11 +1100)]
more error handling improvements

13 years agoMore error reporting
Luke Howard [Tue, 12 Oct 2010 09:20:15 +0000 (20:20 +1100)]
More error reporting

13 years agobetter error checking
Luke Howard [Tue, 12 Oct 2010 01:43:35 +0000 (12:43 +1100)]
better error checking

13 years agodon't include attr length in exported composite names
Luke Howard [Tue, 12 Oct 2010 01:38:53 +0000 (12:38 +1100)]
don't include attr length in exported composite names

13 years agoplug leak
Luke Howard [Tue, 12 Oct 2010 01:33:19 +0000 (12:33 +1100)]
plug leak

13 years agoadd RADIUS set/delete attribute code
Luke Howard [Tue, 12 Oct 2010 01:31:05 +0000 (12:31 +1100)]
add RADIUS set/delete attribute code

13 years agosquash error codes before emitting error tokens
Luke Howard [Tue, 12 Oct 2010 01:04:18 +0000 (12:04 +1100)]
squash error codes before emitting error tokens

13 years agoAdd error token type
Luke Howard [Tue, 12 Oct 2010 00:16:56 +0000 (01:16 +0100)]
Add error token type

13 years agoerror fixes
Luke Howard [Mon, 11 Oct 2010 21:58:23 +0000 (22:58 +0100)]
error fixes

13 years agocleanup
Luke Howard [Mon, 11 Oct 2010 20:39:27 +0000 (21:39 +0100)]
cleanup

13 years agocleanup radsec error mapping
Luke Howard [Mon, 11 Oct 2010 20:02:43 +0000 (22:02 +0200)]
cleanup radsec error mapping

13 years agoerror handling fixes
Luke Howard [Mon, 11 Oct 2010 19:43:45 +0000 (21:43 +0200)]
error handling fixes

13 years agoBetter error reporting through com_err
Luke Howard [Mon, 11 Oct 2010 19:12:52 +0000 (21:12 +0200)]
Better error reporting through com_err

13 years agoadd gsseap error table
Luke Howard [Mon, 11 Oct 2010 14:35:02 +0000 (16:35 +0200)]
add gsseap error table

13 years agoinitialise output token, cleanup
Luke Howard [Mon, 11 Oct 2010 13:00:14 +0000 (15:00 +0200)]
initialise output token, cleanup

13 years agomake name importing table driven
Luke Howard [Mon, 11 Oct 2010 08:12:06 +0000 (10:12 +0200)]
make name importing table driven