moonshot.git
13 years agoActually build eap and mech_eap
Sam Hartman [Tue, 8 Mar 2011 12:29:48 +0000 (07:29 -0500)]
Actually build eap and mech_eap

13 years agoInclude --with-xmltooling
Sam Hartman [Tue, 8 Mar 2011 12:28:06 +0000 (07:28 -0500)]
Include --with-xmltooling

13 years agoTry building with eap from source tree
Sam Hartman [Tue, 8 Mar 2011 02:35:46 +0000 (21:35 -0500)]
Try building with eap from source tree

13 years agomark *_err.c as built sources
Sam Hartman [Tue, 8 Mar 2011 02:08:46 +0000 (21:08 -0500)]
mark *_err.c as built sources

13 years agoLook for mech_eap dependencies in
Sam Hartman [Tue, 8 Mar 2011 01:46:45 +0000 (20:46 -0500)]
Look for mech_eap dependencies in

13 years agoMove libradsec forward to be consistent with mech_eap
Sam Hartman [Tue, 8 Mar 2011 01:45:55 +0000 (20:45 -0500)]
Move libradsec forward to be consistent with mech_eap

13 years agoinclude /usr/lib/freeradius in LDFLAGS
Sam Hartman [Tue, 8 Mar 2011 01:37:36 +0000 (20:37 -0500)]
include /usr/lib/freeradius in LDFLAGS

Debian installs freeradius development libs in /usr/lib/freeradius.
Try looking there somewhat hackishly.

13 years agoalways sent User-Name and GSS-* attributes
Luke Howard [Fri, 4 Mar 2011 11:38:24 +0000 (22:38 +1100)]
always sent User-Name and GSS-* attributes

13 years agoupdate for latest radsec
Luke Howard [Fri, 4 Mar 2011 11:38:04 +0000 (22:38 +1100)]
update for latest radsec

13 years agoCleanup readme
Luke Howard [Thu, 3 Mar 2011 01:25:22 +0000 (12:25 +1100)]
Cleanup readme

13 years agoSent @REALM in EAP identity response
Luke Howard [Wed, 2 Mar 2011 05:46:08 +0000 (16:46 +1100)]
Sent @REALM in EAP identity response

13 years agoSome additional README notes
Luke Howard [Wed, 2 Mar 2011 02:43:16 +0000 (13:43 +1100)]
Some additional README notes

13 years agoUse anonymous name if we have not initiator identity
Luke Howard [Wed, 2 Mar 2011 02:42:34 +0000 (13:42 +1100)]
Use anonymous name if we have not initiator identity

13 years agoUse libeap API for constructing EAP identity request packet
Luke Howard [Tue, 1 Mar 2011 23:59:39 +0000 (10:59 +1100)]
Use libeap API for constructing EAP identity request packet

13 years agoForward EAP identity response as RADIUS user name
Luke Howard [Tue, 1 Mar 2011 23:53:18 +0000 (10:53 +1100)]
Forward EAP identity response as RADIUS user name

13 years agoAdd dictionary file with UKERNA attributes
Luke Howard [Tue, 1 Mar 2011 23:31:54 +0000 (10:31 +1100)]
Add dictionary file with UKERNA attributes

13 years agoDon't leak packet if request object creation fails
Luke Howard [Mon, 28 Feb 2011 23:16:24 +0000 (10:16 +1100)]
Don't leak packet if request object creation fails

13 years agoMerge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot
Luke Howard [Mon, 28 Feb 2011 23:16:07 +0000 (10:16 +1100)]
Merge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot

Conflicts:
mech_eap/accept_sec_context.c

13 years agoFix a couple of crashers in case of invalid radsec configuration
Luke Howard [Mon, 28 Feb 2011 22:54:45 +0000 (09:54 +1100)]
Fix a couple of crashers in case of invalid radsec configuration

13 years agoUpdate for libradsec changes
Luke Howard [Mon, 28 Feb 2011 22:48:15 +0000 (09:48 +1100)]
Update for libradsec changes

13 years agodisplay_status: fix logic error
Sam Hartman [Mon, 28 Feb 2011 22:04:12 +0000 (17:04 -0500)]
display_status: fix logic error

transposition of next and p

13 years agoaccept_sec_context: only destroy request if it is populated
Sam Hartman [Mon, 28 Feb 2011 21:37:24 +0000 (16:37 -0500)]
accept_sec_context: only destroy request if it is populated

13 years agoFix com_err build targets
Sam Hartman [Mon, 28 Feb 2011 16:22:44 +0000 (11:22 -0500)]
Fix com_err build targets

Make didn't have rules for building gsseap_err.c or radsec_err.c.

13 years agoDon't build freeradius; do build libradsec
Sam Hartman [Mon, 28 Feb 2011 16:01:01 +0000 (11:01 -0500)]
Don't build freeradius; do build libradsec

13 years agoDon't depend on log4shib
Sam Hartman [Sat, 26 Feb 2011 21:24:27 +0000 (16:24 -0500)]
Don't depend on log4shib

Shibboleth can be built with log4shib or log4cpp. We don't need to
make an explicit dependency; shared library search will do that for
us on most common platforms and I believe all we care about.

13 years agoUpdate copyrights for 2011
Luke Howard [Sat, 22 Jan 2011 00:18:18 +0000 (11:18 +1100)]
Update copyrights for 2011

13 years agoNote that /etc/gss/mech is not implementation-specific
Luke Howard [Sat, 22 Jan 2011 00:10:12 +0000 (11:10 +1100)]
Note that /etc/gss/mech is not implementation-specific

13 years agoupdate for libradsec API change
Luke Howard [Fri, 21 Jan 2011 23:41:46 +0000 (10:41 +1100)]
update for libradsec API change

rs_packet_create_acc_request is now rs_packet_create_auth_request

13 years agofix typo, update
Luke Howard [Sun, 9 Jan 2011 08:58:12 +0000 (19:58 +1100)]
fix typo, update

13 years agoRemove some Heimdal compatibility macros, now have patches for Heimdal
Luke Howard [Mon, 3 Jan 2011 11:55:01 +0000 (22:55 +1100)]
Remove some Heimdal compatibility macros, now have patches for Heimdal

13 years agoremove gss_any_t definition, will patch this into Heimdal
Luke Howard [Mon, 3 Jan 2011 06:16:44 +0000 (17:16 +1100)]
remove gss_any_t definition, will patch this into Heimdal

13 years agoremove @TARGET_LIBS@, they don't exist
Luke Howard [Mon, 3 Jan 2011 01:11:01 +0000 (12:11 +1100)]
remove @TARGET_LIBS@, they don't exist

13 years agoreorder shibresolver/shibsp link
Luke Howard [Mon, 3 Jan 2011 00:55:44 +0000 (11:55 +1100)]
reorder shibresolver/shibsp link

13 years agoCleanup
Luke Howard [Sun, 2 Jan 2011 09:43:10 +0000 (20:43 +1100)]
Cleanup

13 years agocorrectly construct KRB-CRED for Heimdal reauth
Luke Howard [Sun, 2 Jan 2011 09:20:07 +0000 (20:20 +1100)]
correctly construct KRB-CRED for Heimdal reauth

13 years agoMerge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot
Luke Howard [Sun, 2 Jan 2011 08:57:19 +0000 (19:57 +1100)]
Merge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot
Reauth fixes

Conflicts:
shibboleth/opensaml2
shibboleth/sp

13 years agoGet default credentials for acceptor context too
Luke Howard [Sun, 2 Jan 2011 07:45:54 +0000 (18:45 +1100)]
Get default credentials for acceptor context too

13 years agoAllow zero length but non-NULL tokens on init_sec_context
Luke Howard [Sun, 2 Jan 2011 07:33:38 +0000 (18:33 +1100)]
Allow zero length but non-NULL tokens on init_sec_context

13 years agoAdd GSSEAP_MISSING_PASSWORD minor status code
Luke Howard [Sun, 2 Jan 2011 04:25:55 +0000 (15:25 +1100)]
Add GSSEAP_MISSING_PASSWORD minor status code

13 years agoupdate for current EAP draft
Luke Howard [Sat, 1 Jan 2011 12:39:37 +0000 (23:39 +1100)]
update for current EAP draft

13 years agoupdate Lucid code for Heimdal
Luke Howard [Sat, 1 Jan 2011 12:38:10 +0000 (23:38 +1100)]
update Lucid code for Heimdal

13 years agoMore Heimdal portability cleanups
Luke Howard [Sat, 1 Jan 2011 12:18:18 +0000 (23:18 +1100)]
More Heimdal portability cleanups

13 years agoHeimdal portability cleanups
Luke Howard [Sat, 1 Jan 2011 12:16:20 +0000 (23:16 +1100)]
Heimdal portability cleanups

13 years agoupdate notes
Luke Howard [Sat, 1 Jan 2011 11:11:30 +0000 (22:11 +1100)]
update notes

13 years agoMIT build fixes
Luke Howard [Sat, 1 Jan 2011 11:07:43 +0000 (22:07 +1100)]
MIT build fixes

13 years agoMore Heimdal reauth portability
Luke Howard [Sat, 1 Jan 2011 11:05:34 +0000 (22:05 +1100)]
More Heimdal reauth portability

13 years agoFix some warnings
Luke Howard [Sat, 1 Jan 2011 10:04:41 +0000 (21:04 +1100)]
Fix some warnings

13 years agoPartial build of reauth code against Heimdal
Luke Howard [Sat, 1 Jan 2011 10:01:20 +0000 (21:01 +1100)]
Partial build of reauth code against Heimdal

13 years agoHeimdal portability fixes (except for reauth)
Luke Howard [Fri, 31 Dec 2010 08:45:03 +0000 (19:45 +1100)]
Heimdal portability fixes (except for reauth)

13 years agomod_auth_kerb ->mod_gssapi
Sam Hartman [Thu, 16 Dec 2010 18:42:00 +0000 (13:42 -0500)]
mod_auth_kerb ->mod_gssapi

13 years agoEnsure checksum type is keyed
Luke Howard [Sat, 4 Dec 2010 01:52:16 +0000 (12:52 +1100)]
Ensure checksum type is keyed

13 years agobuilder: fix typo
Sam Hartman [Wed, 24 Nov 2010 20:58:36 +0000 (15:58 -0500)]
builder: fix typo

13 years agobuilder: add freeradius configure options
Sam Hartman [Wed, 24 Nov 2010 19:47:30 +0000 (14:47 -0500)]
builder: add freeradius configure options

13 years agoBuilder: set umask
Sam Hartman [Wed, 24 Nov 2010 18:48:40 +0000 (13:48 -0500)]
Builder: set umask

So that make install produces installations that can be read by non-root, set the umask correctly.

13 years agoWhen processing error tokens at the initiator, verify minor status
Luke Howard [Sun, 21 Nov 2010 14:19:30 +0000 (01:19 +1100)]
When processing error tokens at the initiator, verify minor status
code is valid wire error with new IS_WIRE_ERROR macro

13 years agoFix typo
Sam Hartman [Tue, 16 Nov 2010 19:02:14 +0000 (14:02 -0500)]
Fix typo

13 years agoInclude -- for schroot configure
Sam Hartman [Tue, 16 Nov 2010 18:03:12 +0000 (13:03 -0500)]
Include -- for schroot configure

13 years agoRun build in schroot too
Sam Hartman [Tue, 16 Nov 2010 17:58:50 +0000 (12:58 -0500)]
Run build in schroot too

13 years agoActually make install as root
Sam Hartman [Tue, 16 Nov 2010 16:59:11 +0000 (11:59 -0500)]
Actually make install as root

13 years agoCorrect logic for schroot creation
Sam Hartman [Tue, 16 Nov 2010 16:54:06 +0000 (11:54 -0500)]
Correct logic for schroot creation

13 years agofix configure call
Sam Hartman [Tue, 16 Nov 2010 16:47:56 +0000 (11:47 -0500)]
fix configure call

13 years agoAdd extra packages
Sam Hartman [Tue, 16 Nov 2010 16:31:55 +0000 (11:31 -0500)]
Add extra packages

13 years agoUse absolute URIs to pacify buildbot
Sam Hartman [Tue, 16 Nov 2010 16:27:51 +0000 (11:27 -0500)]
Use absolute URIs to pacify  buildbot

13 years agoScript to build mainline packages
Sam Hartman [Tue, 16 Nov 2010 16:16:42 +0000 (11:16 -0500)]
Script to build mainline packages

13 years agofreeradius plus patches we need to build
Sam Hartman [Tue, 16 Nov 2010 15:02:32 +0000 (10:02 -0500)]
freeradius plus patches we need to build

13 years agofix incorrect OID in sample documentation
Luke Howard [Thu, 11 Nov 2010 03:37:05 +0000 (14:37 +1100)]
fix incorrect OID in sample documentation

13 years agonote sample radsec.conf
Luke Howard [Thu, 11 Nov 2010 03:36:16 +0000 (14:36 +1100)]
note sample radsec.conf

13 years agoAdd freeradius git
Sam Hartman [Fri, 5 Nov 2010 14:10:24 +0000 (10:10 -0400)]
Add freeradius git

13 years agoUse 2.4RC1 tags for Shibboleth
Sam Hartman [Fri, 5 Nov 2010 13:56:34 +0000 (09:56 -0400)]
Use 2.4RC1 tags for Shibboleth

13 years agoUpdate to support packages property
Sam Hartman [Sun, 31 Oct 2010 21:36:08 +0000 (17:36 -0400)]
Update to support packages property

13 years agohook from buildbot
Sam Hartman [Sun, 31 Oct 2010 21:07:21 +0000 (17:07 -0400)]
hook from buildbot

13 years agoMove forward shibboleth components
Sam Hartman [Sat, 30 Oct 2010 15:38:53 +0000 (11:38 -0400)]
Move forward shibboleth components

13 years agogssEapCreateAttrContext should not mutate context fields directly
Luke Howard [Tue, 26 Oct 2010 23:22:36 +0000 (10:22 +1100)]
gssEapCreateAttrContext should not mutate context fields directly

13 years agoSet *conf_state on successful return from
Luke Howard [Tue, 26 Oct 2010 22:00:42 +0000 (09:00 +1100)]
Set *conf_state on successful return from
gss_krb5int_make_seal_token_v3_iov, fixing a case where it wasn't
always set by gss_wrap_iov.  Patch from aberry@likewise.com.

13 years agocleanup
Luke Howard [Mon, 25 Oct 2010 22:42:50 +0000 (09:42 +1100)]
cleanup

13 years agoEnable libeap debugging iff GSSEAP_DEBUG defined
Luke Howard [Mon, 25 Oct 2010 22:35:20 +0000 (09:35 +1100)]
Enable libeap debugging iff GSSEAP_DEBUG defined

13 years agoIf we can't make reauth creds, return GSS_S_UNAVAILABLE
Luke Howard [Mon, 25 Oct 2010 21:34:42 +0000 (08:34 +1100)]
If we can't make reauth creds, return GSS_S_UNAVAILABLE

13 years agoexport gssspi_set_cred_option
Luke Howard [Mon, 25 Oct 2010 21:12:37 +0000 (08:12 +1100)]
export gssspi_set_cred_option

13 years agoremove unnecessary namespace qualification
Luke Howard [Mon, 25 Oct 2010 12:06:23 +0000 (23:06 +1100)]
remove unnecessary namespace qualification

13 years agoset cred->flags from usage before testing
Luke Howard [Mon, 25 Oct 2010 11:45:21 +0000 (22:45 +1100)]
set cred->flags from usage before testing

13 years agoremove some XXX markers
Luke Howard [Mon, 25 Oct 2010 11:40:47 +0000 (22:40 +1100)]
remove some XXX markers

13 years agoCleanup
Luke Howard [Mon, 25 Oct 2010 06:59:40 +0000 (17:59 +1100)]
Cleanup

13 years agoSet GSS_S_CALL_INACCESSIBLE_READ for NULL params
Luke Howard [Mon, 25 Oct 2010 06:59:14 +0000 (17:59 +1100)]
Set GSS_S_CALL_INACCESSIBLE_READ for NULL params

13 years agoPull in make metadata optional for shibboleth resolver
Sam Hartman [Fri, 22 Oct 2010 11:12:01 +0000 (07:12 -0400)]
Pull in make metadata optional for shibboleth resolver

13 years agodocument state constants
Luke Howard [Fri, 22 Oct 2010 01:14:41 +0000 (12:14 +1100)]
document state constants

13 years agocleanup some symbolic constants
Luke Howard [Fri, 22 Oct 2010 01:11:53 +0000 (12:11 +1100)]
cleanup some symbolic constants

13 years agocleanup
Luke Howard [Thu, 21 Oct 2010 23:18:08 +0000 (10:18 +1100)]
cleanup

13 years agoEnable rs_conn_select_server code
Luke Howard [Thu, 21 Oct 2010 23:05:37 +0000 (10:05 +1100)]
Enable rs_conn_select_server code

13 years agocleanup
Luke Howard [Thu, 21 Oct 2010 13:39:27 +0000 (00:39 +1100)]
cleanup

13 years agomap Shibboleth/OpenSAML exceptions to mech errors
Luke Howard [Thu, 21 Oct 2010 13:36:25 +0000 (00:36 +1100)]
map Shibboleth/OpenSAML exceptions to mech errors

13 years agobetter error code propagation when creating attr contexts
Luke Howard [Thu, 21 Oct 2010 12:47:43 +0000 (23:47 +1100)]
better error code propagation when creating attr contexts

13 years agoReturn an error if attribute context initialisation fails
Luke Howard [Thu, 21 Oct 2010 12:17:31 +0000 (23:17 +1100)]
Return an error if attribute context initialisation fails

13 years agocatch resolver exceptions
Luke Howard [Thu, 21 Oct 2010 04:45:51 +0000 (15:45 +1100)]
catch resolver exceptions

13 years agocleanup
Luke Howard [Thu, 21 Oct 2010 04:45:48 +0000 (15:45 +1100)]
cleanup

13 years agosync with upstream
Luke Howard [Thu, 21 Oct 2010 04:37:16 +0000 (15:37 +1100)]
sync with upstream

13 years agofix some build issues with current resolver
Luke Howard [Thu, 21 Oct 2010 04:36:47 +0000 (15:36 +1100)]
fix some build issues with current resolver

13 years agoadd back xmltooling
Luke Howard [Wed, 20 Oct 2010 11:53:10 +0000 (22:53 +1100)]
add back xmltooling

13 years agoBuild with new C++ clean libeap
Luke Howard [Tue, 19 Oct 2010 13:08:02 +0000 (00:08 +1100)]
Build with new C++ clean libeap

13 years agoMerge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot
Luke Howard [Tue, 19 Oct 2010 12:08:57 +0000 (23:08 +1100)]
Merge branch 'master' of ssh://moonshot.suchdamage.org:822/srv/git/moonshot

Conflicts:
shibboleth/opensaml2
shibboleth/xmltooling

13 years agoempty message
Luke Howard [Tue, 19 Oct 2010 11:54:50 +0000 (22:54 +1100)]
empty message