moonshot.git
13 years agocorrect importing of partial attribute contexts
Luke Howard [Mon, 28 Mar 2011 22:59:17 +0000 (09:59 +1100)]
correct importing of partial attribute contexts

13 years agofix a few compile nits
Luke Howard [Mon, 28 Mar 2011 22:46:01 +0000 (09:46 +1100)]
fix a few compile nits

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Mon, 28 Mar 2011 22:37:38 +0000 (09:37 +1100)]
Merge branch 'master' into tlv-mic

Conflicts:
mech_eap/export_sec_context.c
mech_eap/import_sec_context.c

13 years agoadd --with-gssapi for shibresolver
Luke Howard [Mon, 28 Mar 2011 22:27:16 +0000 (09:27 +1100)]
add --with-gssapi for shibresolver

13 years agoRefactor export reentrancy fix to be less intrusive
Luke Howard [Mon, 28 Mar 2011 22:06:48 +0000 (09:06 +1100)]
Refactor export reentrancy fix to be less intrusive

13 years agodon't assert !CTX_FLAG_KRB_REAUTH when exporting partial contexts,
Luke Howard [Mon, 28 Mar 2011 15:26:52 +0000 (02:26 +1100)]
don't assert !CTX_FLAG_KRB_REAUTH when exporting partial contexts,
we may need this path for local attribute provider reentrancy

13 years agoupdate resolver
Luke Howard [Mon, 28 Mar 2011 15:15:33 +0000 (02:15 +1100)]
update resolver

13 years agosend exported GSS context token to shibresolver
Luke Howard [Mon, 28 Mar 2011 15:10:42 +0000 (02:10 +1100)]
send exported GSS context token to shibresolver

13 years agoadd export_sec_context variant that does not reenter local attribute path
Luke Howard [Mon, 28 Mar 2011 14:58:03 +0000 (01:58 +1100)]
add export_sec_context variant that does not reenter local attribute path

13 years agouse gss_eap_util namespace for utility functions until we
Luke Howard [Mon, 28 Mar 2011 14:32:38 +0000 (01:32 +1100)]
use gss_eap_util namespace for utility functions until we
put everything in its own namespace

13 years agocomment out dumping code json-name
Luke Howard [Mon, 28 Mar 2011 06:18:22 +0000 (17:18 +1100)]
comment out dumping code

13 years agoDDF bridging not entirely toll free
Luke Howard [Mon, 28 Mar 2011 06:15:15 +0000 (17:15 +1100)]
DDF bridging not entirely toll free

13 years agocleanup
Luke Howard [Mon, 28 Mar 2011 06:14:15 +0000 (17:14 +1100)]
cleanup

13 years agocleanup
Luke Howard [Mon, 28 Mar 2011 06:12:51 +0000 (17:12 +1100)]
cleanup

13 years agoadd JSON utility class
Luke Howard [Mon, 28 Mar 2011 06:07:43 +0000 (17:07 +1100)]
add JSON utility class

13 years agoremove ROKEN_LIB_FUNCTION
Luke Howard [Sun, 27 Mar 2011 23:51:43 +0000 (10:51 +1100)]
remove ROKEN_LIB_FUNCTION

13 years agoadd jansson to source_packages
Luke Howard [Sun, 27 Mar 2011 23:48:57 +0000 (10:48 +1100)]
add jansson to source_packages

13 years agoupdate shibboleth
Luke Howard [Sun, 27 Mar 2011 23:13:02 +0000 (10:13 +1100)]
update shibboleth

13 years agoset jansson to 2.0
Luke Howard [Sun, 27 Mar 2011 23:12:29 +0000 (10:12 +1100)]
set jansson to 2.0

13 years agoadd jansson submodule
Luke Howard [Sun, 27 Mar 2011 23:11:15 +0000 (10:11 +1100)]
add jansson submodule

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Sun, 27 Mar 2011 23:07:10 +0000 (10:07 +1100)]
Merge branch 'master' into tlv-mic

13 years agouse JSON instead of DDF marshalling
Luke Howard [Sun, 27 Mar 2011 15:21:27 +0000 (02:21 +1100)]
use JSON instead of DDF marshalling
use our own base64 routines

13 years agoin progress use DDF to serialise names
Luke Howard [Sat, 26 Mar 2011 15:16:40 +0000 (02:16 +1100)]
in progress use DDF to serialise names

get DDF marshalling working

remove debugging statement

13 years agomake attribute prefix a class method
Luke Howard [Sun, 27 Mar 2011 22:47:48 +0000 (09:47 +1100)]
make attribute prefix a class method

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Sun, 27 Mar 2011 11:31:12 +0000 (22:31 +1100)]
Merge branch 'master' into tlv-mic

13 years agocheck provider enabled before non-marshalled initializing
Luke Howard [Sun, 27 Mar 2011 01:52:43 +0000 (12:52 +1100)]
check provider enabled before non-marshalled initializing

13 years agofix missing return statement in importing attributes
Luke Howard [Sat, 26 Mar 2011 15:17:39 +0000 (02:17 +1100)]
fix missing return statement in importing attributes

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Sat, 26 Mar 2011 05:56:04 +0000 (16:56 +1100)]
Merge branch 'master' into tlv-mic

13 years agocleanup, fix uninitialized variable warning
Luke Howard [Sat, 26 Mar 2011 03:53:57 +0000 (14:53 +1100)]
cleanup, fix uninitialized variable warning

13 years agocomments on attribute context import
Luke Howard [Sat, 26 Mar 2011 03:27:51 +0000 (14:27 +1100)]
comments on attribute context import

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Sat, 26 Mar 2011 03:22:15 +0000 (14:22 +1100)]
Merge branch 'master' into tlv-mic

13 years agoInclude locally resolved attributes in composite name token
Luke Howard [Sat, 26 Mar 2011 03:19:07 +0000 (14:19 +1100)]
Include locally resolved attributes in composite name token

13 years agodon't use C++ comments
Luke Howard [Sat, 26 Mar 2011 00:01:07 +0000 (11:01 +1100)]
don't use C++ comments

13 years agoStop setting appID to the acceptor name, adjust handling of resolver object.
Scott Cantor [Fri, 25 Mar 2011 13:50:38 +0000 (14:50 +0100)]
Stop setting appID to the acceptor name, adjust handling of resolver object.

13 years agoUse serialized values out of resolver instead of raw string values.
Scott Cantor [Fri, 25 Mar 2011 14:06:14 +0000 (15:06 +0100)]
Use serialized values out of resolver instead of raw string values.

13 years agoUpdate resolver
Sam Hartman [Fri, 25 Mar 2011 13:49:17 +0000 (09:49 -0400)]
Update resolver

13 years agoFix typo
Sam Hartman [Fri, 25 Mar 2011 12:51:54 +0000 (08:51 -0400)]
Fix typo

13 years agos:-R:-rpath: for mac builds
Sam Hartman [Fri, 25 Mar 2011 12:44:03 +0000 (08:44 -0400)]
s:-R:-rpath: for mac builds

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Fri, 25 Mar 2011 12:32:39 +0000 (23:32 +1100)]
Merge branch 'master' into tlv-mic

13 years agoMerge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot
Luke Howard [Fri, 25 Mar 2011 12:32:15 +0000 (23:32 +1100)]
Merge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot

13 years agoTreat missing attribute name format as UNSPECIFIED
Luke Howard [Fri, 25 Mar 2011 12:31:20 +0000 (23:31 +1100)]
Treat missing attribute name format as UNSPECIFIED

Patch from Scott Cantor

13 years agoUpdate to a new set of shibboleth dependencies
Sam Hartman [Fri, 25 Mar 2011 11:14:58 +0000 (07:14 -0400)]
Update to a new set of shibboleth dependencies

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Tue, 22 Mar 2011 01:45:19 +0000 (12:45 +1100)]
Merge branch 'master' into tlv-mic

13 years agoupdate for draft-josefsson-gss-capsulate-01
Luke Howard [Tue, 22 Mar 2011 01:45:02 +0000 (12:45 +1100)]
update for draft-josefsson-gss-capsulate-01

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Mon, 21 Mar 2011 22:26:58 +0000 (09:26 +1100)]
Merge branch 'master' into tlv-mic

13 years agoRemove freeradius because it doesn't build and is not what you want.
Sam Hartman [Mon, 21 Mar 2011 13:51:46 +0000 (09:51 -0400)]
Remove freeradius because it doesn't build and is not what you want.

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Mon, 21 Mar 2011 13:39:06 +0000 (00:39 +1100)]
Merge branch 'master' into tlv-mic

13 years agoupdate libradsec to a177887c
Luke Howard [Mon, 21 Mar 2011 13:38:43 +0000 (00:38 +1100)]
update libradsec to a177887c

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Mon, 21 Mar 2011 13:18:13 +0000 (00:18 +1100)]
Merge branch 'master' into tlv-mic

13 years agoupdate for latest libradsec
Luke Howard [Mon, 21 Mar 2011 13:17:53 +0000 (00:17 +1100)]
update for latest libradsec

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Mon, 21 Mar 2011 09:16:23 +0000 (20:16 +1100)]
Merge branch 'master' into tlv-mic

13 years agotrigger build by updating git
Luke Howard [Mon, 21 Mar 2011 09:15:47 +0000 (20:15 +1100)]
trigger build by updating git

13 years agoadd openssh
Luke Howard [Mon, 21 Mar 2011 09:11:41 +0000 (20:11 +1100)]
add openssh

13 years agoRevert "disable openssh submodule for now"
Luke Howard [Mon, 21 Mar 2011 08:52:37 +0000 (19:52 +1100)]
Revert "disable openssh submodule for now"

This reverts commit 5de8b91214e85ea0dcedc2441171206f36603462.

13 years agodisable openssh submodule for now
Luke Howard [Mon, 21 Mar 2011 08:48:55 +0000 (19:48 +1100)]
disable openssh submodule for now

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Mon, 21 Mar 2011 08:21:52 +0000 (19:21 +1100)]
Merge branch 'master' into tlv-mic

13 years agoUse OpenSSH with generality fixes
Luke Howard [Mon, 21 Mar 2011 08:20:10 +0000 (19:20 +1100)]
Use OpenSSH with generality fixes

13 years agouse OpenSSH with GSS generality fixes
Luke Howard [Mon, 21 Mar 2011 08:19:54 +0000 (19:19 +1100)]
use OpenSSH with GSS generality fixes

13 years agouse absolute path for openssh submodule
Luke Howard [Mon, 21 Mar 2011 08:04:06 +0000 (04:04 -0400)]
use absolute path for openssh submodule

13 years agoadd openssh
Luke Howard [Mon, 21 Mar 2011 07:59:49 +0000 (03:59 -0400)]
add openssh

13 years agoadd openssh submodule
Luke Howard [Mon, 21 Mar 2011 07:58:08 +0000 (03:58 -0400)]
add openssh submodule

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Mon, 21 Mar 2011 07:32:38 +0000 (18:32 +1100)]
Merge branch 'master' into tlv-mic

13 years agoHeimdal cannot deal with NULL realm, so make zero-length string
Luke Howard [Mon, 21 Mar 2011 07:15:51 +0000 (18:15 +1100)]
Heimdal cannot deal with NULL realm, so make zero-length string

13 years agoHeimdal cannot deal with NULL realm, so make zero-length string
Luke Howard [Mon, 21 Mar 2011 07:15:51 +0000 (18:15 +1100)]
Heimdal cannot deal with NULL realm, so make zero-length string

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Mon, 21 Mar 2011 06:34:06 +0000 (17:34 +1100)]
Merge branch 'master' into tlv-mic

13 years agofix pointer alias warning surfaced on FreeBSD
Luke Howard [Mon, 21 Mar 2011 06:33:47 +0000 (17:33 +1100)]
fix pointer alias warning surfaced on FreeBSD

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Sun, 20 Mar 2011 10:05:58 +0000 (21:05 +1100)]
Merge branch 'master' into tlv-mic

13 years agodefine gss_any_t for Heimdal, because it doesn't support it
Luke Howard [Sun, 20 Mar 2011 10:05:28 +0000 (21:05 +1100)]
define gss_any_t for Heimdal, because it doesn't support it

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Sat, 19 Mar 2011 14:31:49 +0000 (01:31 +1100)]
Merge branch 'master' into tlv-mic

13 years agorelease defaultIdentity/defaultCreds on error
Luke Howard [Sat, 19 Mar 2011 14:31:31 +0000 (01:31 +1100)]
release defaultIdentity/defaultCreds on error

13 years agocorrect pointer error in gsseap_set_cred_flag example
Luke Howard [Fri, 18 Mar 2011 13:33:54 +0000 (00:33 +1100)]
correct pointer error in gsseap_set_cred_flag example

13 years agocorrect pointer error in gsseap_set_cred_flag example
Luke Howard [Fri, 18 Mar 2011 13:33:54 +0000 (00:33 +1100)]
correct pointer error in gsseap_set_cred_flag example

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Fri, 18 Mar 2011 13:21:54 +0000 (00:21 +1100)]
Merge branch 'master' into tlv-mic

13 years agofix regression where stored creds would be required
Luke Howard [Fri, 18 Mar 2011 13:20:42 +0000 (00:20 +1100)]
fix regression where stored creds would be required

13 years agoUse stored identity if cached identity matches
Luke Howard [Fri, 18 Mar 2011 13:13:18 +0000 (00:13 +1100)]
Use stored identity if cached identity matches

13 years agodon't leak defaultCreds
Luke Howard [Fri, 18 Mar 2011 12:59:24 +0000 (23:59 +1100)]
don't leak defaultCreds

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Fri, 18 Mar 2011 12:51:45 +0000 (23:51 +1100)]
Merge branch 'master' into tlv-mic

13 years agoSupport for reading default identity/creds from file
Luke Howard [Fri, 18 Mar 2011 12:46:31 +0000 (23:46 +1100)]
Support for reading default identity/creds from file

Heads up: it's now possible to store your default identity and
credentials in a file in your home directory, called .gss_eap_id.
See README for details. It's also valid to just store the identity
in this file without credentials.

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Fri, 18 Mar 2011 11:13:13 +0000 (22:13 +1100)]
Merge branch 'master' into tlv-mic

13 years agounbreak Heimdal build
Luke Howard [Fri, 18 Mar 2011 11:12:52 +0000 (22:12 +1100)]
unbreak Heimdal build

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Fri, 18 Mar 2011 06:57:55 +0000 (17:57 +1100)]
Merge branch 'master' into tlv-mic

13 years agodon't append "@" to login name for default identity
Luke Howard [Fri, 18 Mar 2011 06:57:18 +0000 (17:57 +1100)]
don't append "@" to login name for default identity

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Fri, 18 Mar 2011 06:45:18 +0000 (17:45 +1100)]
Merge branch 'master' into tlv-mic

13 years agobetter documentation on default realm
Luke Howard [Fri, 18 Mar 2011 06:44:50 +0000 (17:44 +1100)]
better documentation on default realm

13 years agoderive anonymous identity directly from realm
Luke Howard [Fri, 18 Mar 2011 06:42:11 +0000 (17:42 +1100)]
derive anonymous identity directly from realm

this avoids any escaping errors

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Fri, 18 Mar 2011 06:16:28 +0000 (17:16 +1100)]
Merge branch 'master' into tlv-mic

13 years agoName parse fixes
Luke Howard [Fri, 18 Mar 2011 06:16:04 +0000 (17:16 +1100)]
Name parse fixes

Distinguish between NT_EAP_NAME and NT_USER_NAME; latter will append
default EAP realm if present, former won't. Neither will append default
Kerberos realm.

Ensure that exported names conform to draft-ietf-abfab-gss-eap-01 by
not including realm component if absent.

Conflicts:

mech_eap/util_name.c

13 years agoDon't include @ symbol in realmless names, to conform with draft-ietf-abfab-gss-eap
Luke Howard [Fri, 18 Mar 2011 05:36:26 +0000 (16:36 +1100)]
Don't include @ symbol in realmless names, to conform with draft-ietf-abfab-gss-eap

13 years agoRevert "Don't include @ symbol in realmless names, to conform with draft-ietf-abfab...
Luke Howard [Fri, 18 Mar 2011 06:13:37 +0000 (17:13 +1100)]
Revert "Don't include @ symbol in realmless names, to conform with draft-ietf-abfab-gss-eap"

This reverts commit 6334d087058e30c9fb8686fd307b9c84323f2a4d.

13 years agodon't fail reauth if there is any keytab error
Luke Howard [Fri, 18 Mar 2011 06:09:21 +0000 (17:09 +1100)]
don't fail reauth if there is any keytab error

13 years agodon't fail reauth if there is any keytab error
Luke Howard [Fri, 18 Mar 2011 06:09:21 +0000 (17:09 +1100)]
don't fail reauth if there is any keytab error

13 years agoenforce empty host portion of name for initiators
Luke Howard [Fri, 18 Mar 2011 05:56:16 +0000 (16:56 +1100)]
enforce empty host portion of name for initiators

13 years agoName parse fixes
Luke Howard [Fri, 18 Mar 2011 05:50:04 +0000 (16:50 +1100)]
Name parse fixes

Distinguish between NT_EAP_NAME and NT_USER_NAME; latter will append
default EAP realm if present, former won't. Neither will append default
Kerberos realm.

Ensure that exported names conform to draft-ietf-abfab-gss-eap-01 by
not including realm component if absent.

13 years agoDon't include @ symbol in realmless names, to conform with draft-ietf-abfab-gss-eap
Luke Howard [Fri, 18 Mar 2011 05:36:26 +0000 (16:36 +1100)]
Don't include @ symbol in realmless names, to conform with draft-ietf-abfab-gss-eap

13 years agoDon't include @ symbol in realmless names, to conform with draft-ietf-abfab-gss-eap
Luke Howard [Fri, 18 Mar 2011 05:36:26 +0000 (16:36 +1100)]
Don't include @ symbol in realmless names, to conform with draft-ietf-abfab-gss-eap

13 years agocleanup previous commit
Luke Howard [Fri, 18 Mar 2011 05:18:24 +0000 (16:18 +1100)]
cleanup previous commit

13 years agoGo to great lengths to avoid accidentally appending the default Kerberos realm
Luke Howard [Fri, 18 Mar 2011 05:16:20 +0000 (16:16 +1100)]
Go to great lengths to avoid accidentally appending the default Kerberos realm

13 years agocleanup previous commit
Luke Howard [Fri, 18 Mar 2011 05:18:24 +0000 (16:18 +1100)]
cleanup previous commit

13 years agoGo to great lengths to avoid accidentally appending the default Kerberos realm
Luke Howard [Fri, 18 Mar 2011 05:16:20 +0000 (16:16 +1100)]
Go to great lengths to avoid accidentally appending the default Kerberos realm

13 years agoMerge branch 'master' into tlv-mic
Luke Howard [Fri, 18 Mar 2011 00:00:11 +0000 (11:00 +1100)]
Merge branch 'master' into tlv-mic