Sam Hartman [Tue, 19 Nov 2013 17:04:24 +0000 (12:04 -0500)]
temporary: gsscon_passive_authenticate: acquire trustidentity creds.
As discussin in LP: #1203159, the client always uses trustidentity as
a name. We're running into problems because the server uses
GSS_C_NO_CREDENTIAL. That means no service name is included in RADIUS
and unless there's proxy magic, then channel bindings fails.
For now, also acquire trustidentity credentials on the server. This
still leaves the security issue discussed by that bug, but at least
the code works.
Sam Hartman [Mon, 28 Oct 2013 20:16:11 +0000 (16:16 -0400)]
specfile: sqlite-devel not sqlite3-devel
Sam Hartman [Mon, 28 Oct 2013 18:51:12 +0000 (14:51 -0400)]
buildrequires
Sam Hartman [Thu, 10 Oct 2013 17:26:23 +0000 (13:26 -0400)]
Don't multiply define the same type
Sam Hartman [Tue, 8 Oct 2013 12:45:31 +0000 (08:45 -0400)]
spec file updates
fixes LP: #1236768
Margaret Wasserman [Tue, 17 Sep 2013 11:31:51 +0000 (07:31 -0400)]
Add accessors for TR_MSG structure.
Margaret Wasserman [Wed, 10 Jul 2013 17:11:05 +0000 (13:11 -0400)]
Updated config file with complete, consistent config for Trust Router 1.0.
Margaret Wasserman [Wed, 10 Jul 2013 16:37:14 +0000 (12:37 -0400)]
Fix forward reference that causes CentOS build to fail.
Margaret Wasserman [Wed, 10 Jul 2013 15:27:55 +0000 (11:27 -0400)]
Fix logic error in previous fix for APC parsing.
Margaret Wasserman [Wed, 10 Jul 2013 15:26:29 +0000 (11:26 -0400)]
Don't parse APCs in IDP realm if they aren't there.
Sam Hartman [Tue, 9 Jul 2013 23:47:39 +0000 (19:47 -0400)]
Version 1.0
Margaret Wasserman [Tue, 9 Jul 2013 22:50:56 +0000 (18:50 -0400)]
Fix order of parameters in wildcard call.
Margaret Wasserman [Tue, 9 Jul 2013 22:26:34 +0000 (18:26 -0400)]
Clean up wildcard match code, add debugging printf
Margaret Wasserman [Tue, 9 Jul 2013 22:12:46 +0000 (18:12 -0400)]
Fix logic error in gss name comparison.
Margaret Wasserman [Tue, 9 Jul 2013 21:57:18 +0000 (17:57 -0400)]
Fix gss matching code to compare to the rp realm for the request.
Margaret Wasserman [Tue, 9 Jul 2013 21:25:09 +0000 (17:25 -0400)]
Fix segfault in RP client lookup code.
Margaret Wasserman [Tue, 9 Jul 2013 20:21:19 +0000 (16:21 -0400)]
Fixes to make gss_name checking code compile.
Margaret Wasserman [Tue, 9 Jul 2013 20:08:54 +0000 (16:08 -0400)]
Merge branch 'master' of moonshot.suchdamage.org:/srv/git/trust_router
Margaret Wasserman [Tue, 9 Jul 2013 20:08:28 +0000 (16:08 -0400)]
Add code to do gss_name check in trust router.
Sam Hartman [Tue, 9 Jul 2013 20:03:52 +0000 (16:03 -0400)]
tid: implement GSS name callback
Margaret Wasserman [Tue, 9 Jul 2013 19:48:40 +0000 (15:48 -0400)]
Add code for rp client lookups to the build.
Margaret Wasserman [Tue, 9 Jul 2013 19:10:11 +0000 (15:10 -0400)]
Update config code and config files to fully parse rp_client
rp_permitted filters.
Sam Hartman [Tue, 9 Jul 2013 14:36:09 +0000 (10:36 -0400)]
tids: build after gsscon change.
This callback always succeeds and needs to be replaced with a correct callback exposed through the tids interface.
Sam Hartman [Mon, 8 Jul 2013 19:08:29 +0000 (15:08 -0400)]
gsscon: callback for client name validation
gsscon_passive_authenticate now takes a callback for client authentication.
Margaret Wasserman [Mon, 8 Jul 2013 19:00:52 +0000 (15:00 -0400)]
Merge gsscon_connect() and gsscon_active_authenticate() calls.
Margaret Wasserman [Wed, 3 Jul 2013 13:30:54 +0000 (09:30 -0400)]
Declare variable so the code will build.
Margaret Wasserman [Wed, 3 Jul 2013 08:02:38 +0000 (04:02 -0400)]
Check rp_realm and target_realm membership in both COI and APC
Margaret Wasserman [Wed, 3 Jul 2013 08:01:48 +0000 (04:01 -0400)]
Updates to the way configuration is merged.
Margaret Wasserman [Tue, 2 Jul 2013 21:18:18 +0000 (17:18 -0400)]
Do not require server list in error response.
Margaret Wasserman [Tue, 2 Jul 2013 21:17:26 +0000 (17:17 -0400)]
Do not send the request on community membership error.
Margaret Wasserman [Tue, 2 Jul 2013 19:51:54 +0000 (15:51 -0400)]
Set socket options before bind().
Margaret Wasserman [Tue, 2 Jul 2013 19:51:25 +0000 (15:51 -0400)]
Fix segfault where request was only partially memset().
Margaret Wasserman [Tue, 2 Jul 2013 18:42:01 +0000 (14:42 -0400)]
Code to check community membership on TR.
Margaret Wasserman [Tue, 2 Jul 2013 18:05:23 +0000 (14:05 -0400)]
Added function to lookup a community by name.
Margaret Wasserman [Tue, 2 Jul 2013 14:04:20 +0000 (10:04 -0400)]
Merge branch 'master' of moonshot.suchdamage.org:/srv/git/trust_router
Margaret Wasserman [Tue, 2 Jul 2013 14:02:26 +0000 (10:02 -0400)]
Added function to do prefix wildcard comparison for filtering.
Margaret Wasserman [Tue, 2 Jul 2013 13:15:50 +0000 (09:15 -0400)]
Fix coding error (segfault) in community config code.
Margaret Wasserman [Tue, 2 Jul 2013 13:12:55 +0000 (09:12 -0400)]
Make functions to find RPs and IDPs externally accessible.
Margaret Wasserman [Tue, 2 Jul 2013 12:49:06 +0000 (08:49 -0400)]
Underlying code to check RP GSS Name.
Margaret Wasserman [Tue, 2 Jul 2013 12:30:20 +0000 (08:30 -0400)]
Code to parse communities in config, so that we can check membership.
Sam Hartman [Tue, 21 May 2013 15:51:01 +0000 (11:51 -0400)]
Update version in spec too
Margaret Wasserman [Wed, 15 May 2013 15:24:21 +0000 (11:24 -0400)]
Updated to-do list for Trust Router 1.0
Margaret Wasserman [Mon, 6 May 2013 19:37:31 +0000 (15:37 -0400)]
Update version to 0.2
Margaret Wasserman [Mon, 6 May 2013 19:31:49 +0000 (15:31 -0400)]
Update .gitignore to include editor save files and executables.
Margaret Wasserman [Mon, 6 May 2013 14:07:04 +0000 (10:07 -0400)]
Add orig_coi to the reponse, fix bugs with coi-to-apc conversion.
Margaret Wasserman [Fri, 3 May 2013 20:56:55 +0000 (16:56 -0400)]
Improved error handling, cleaned up messages, fixed minor bugs.
Margaret Wasserman [Tue, 30 Apr 2013 20:57:03 +0000 (16:57 -0400)]
Added tr_apc.h to list of includes.
Margaret Wasserman [Tue, 30 Apr 2013 20:54:38 +0000 (16:54 -0400)]
Merge branch 'master' of moonshot.suchdamage.org:/srv/git/trust_router
Margaret Wasserman [Tue, 30 Apr 2013 20:54:14 +0000 (16:54 -0400)]
Add new tr_comm.c file to makefile.
Margaret Wasserman [Tue, 30 Apr 2013 18:19:04 +0000 (14:19 -0400)]
Update to-do list to reflect expected beta contents.
Margaret Wasserman [Tue, 30 Apr 2013 18:14:30 +0000 (14:14 -0400)]
Code for TR to change a COI to an APC in forwarded reqs, also some reorg of request handling.
Margaret Wasserman [Tue, 30 Apr 2013 16:31:21 +0000 (12:31 -0400)]
Parsers for "communities:" section of configuration
Sam hartman [Mon, 29 Apr 2013 17:31:15 +0000 (18:31 +0100)]
Update for RPM packaging
Sam Hartman [Wed, 17 Apr 2013 17:41:03 +0000 (13:41 -0400)]
rename tr to trust_router
Sam hartman [Wed, 17 Apr 2013 11:44:11 +0000 (12:44 +0100)]
fixes for building on Centos; mostly -Werror clean at this point
Margaret Wasserman [Mon, 15 Apr 2013 13:21:50 +0000 (09:21 -0400)]
Move DH parameter generation outside of TIDC Instance creation.
Margaret Wasserman [Sun, 14 Apr 2013 13:35:57 +0000 (09:35 -0400)]
Put the connextion and gss context in the request for later use.
Margaret Wasserman [Wed, 10 Apr 2013 22:54:47 +0000 (18:54 -0400)]
Fixes to bugs discovered during initial tidc/radius integration.
Sam Hartman [Wed, 10 Apr 2013 19:30:55 +0000 (15:30 -0400)]
install tr_dh.h
Sam Hartman [Wed, 10 Apr 2013 19:27:05 +0000 (15:27 -0400)]
Refactor: tr_compute_dh_key manages its own buffer
Sam Hartman [Wed, 10 Apr 2013 19:26:47 +0000 (15:26 -0400)]
add tr_name_strlcat and tr_name_strdup
Margaret Wasserman [Sun, 7 Apr 2013 23:23:03 +0000 (19:23 -0400)]
Updates to trust router handlers, added ipaddr cmd line option to tids.
Sam Hartman [Fri, 5 Apr 2013 16:43:10 +0000 (12:43 -0400)]
Initialize tid response structure
Sam Hartman [Fri, 5 Apr 2013 15:27:00 +0000 (11:27 -0400)]
Remove Kerberos specific principal manipulation
Sam Hartman [Fri, 5 Apr 2013 14:13:30 +0000 (10:13 -0400)]
fix tids authentication error logic
Sam Hartman [Fri, 5 Apr 2013 01:23:02 +0000 (21:23 -0400)]
Add sqlite3 database insert
Support inserting into a database as the first argument to tids.
Sam Hartman [Fri, 5 Apr 2013 01:22:20 +0000 (21:22 -0400)]
Depend on sqlite3 and add utility
Add tr_bin_to_hex utility
Margaret Wasserman [Wed, 3 Apr 2013 21:00:33 +0000 (17:00 -0400)]
Merge branch 'master' of moonshot.suchdamage.org:/srv/git/trust_router
Margaret Wasserman [Wed, 3 Apr 2013 20:58:49 +0000 (16:58 -0400)]
TR request and response message handlers.
Sam Hartman [Wed, 3 Apr 2013 14:36:53 +0000 (10:36 -0400)]
Centos only has autoconf 2.63
Margaret Wasserman [Wed, 3 Apr 2013 11:55:20 +0000 (07:55 -0400)]
Configure IDPs and implement AAA server lookup based on IDP realm
Margaret Wasserman [Tue, 2 Apr 2013 15:28:37 +0000 (11:28 -0400)]
Changed GSS service name to "trustidentity"
Margaret Wasserman [Tue, 2 Apr 2013 15:19:55 +0000 (11:19 -0400)]
Updated README to reflect current status
Margaret Wasserman [Mon, 1 Apr 2013 12:30:33 +0000 (08:30 -0400)]
Include new tr.c file.
Margaret Wasserman [Mon, 1 Apr 2013 12:29:52 +0000 (08:29 -0400)]
Added keyname to server block in request/response.
Margaret Wasserman [Mon, 1 Apr 2013 12:28:43 +0000 (08:28 -0400)]
Added TR_INSTANCE, fleshed out config functions.
Margaret Wasserman [Mon, 25 Mar 2013 23:07:57 +0000 (19:07 -0400)]
Fixed warnings, fixed bugs in key generation code.
Margaret Wasserman [Mon, 25 Mar 2013 22:03:54 +0000 (18:03 -0400)]
Merge branch 'master' of moonshot.suchdamage.org:/srv/git/trust_router
Margaret Wasserman [Mon, 25 Mar 2013 21:47:03 +0000 (17:47 -0400)]
Added code to print the keys from dh_test.
Sam Hartman [Wed, 20 Mar 2013 18:12:23 +0000 (14:12 -0400)]
Enable warnings; fix many of them
Sam Hartman [Wed, 20 Mar 2013 17:45:13 +0000 (13:45 -0400)]
rename dh_test to tr_dh_test for packaging
Sam Hartman [Wed, 20 Mar 2013 17:43:58 +0000 (13:43 -0400)]
install public includes
Sam Hartman [Wed, 20 Mar 2013 17:40:14 +0000 (13:40 -0400)]
Remove dependency on gsscon.h from public includes
Sam Hartman [Wed, 20 Mar 2013 17:36:50 +0000 (13:36 -0400)]
rename include files into trust_router
Sam Hartman [Wed, 20 Mar 2013 16:55:14 +0000 (12:55 -0400)]
libtr_di: new library
Default visibility to hidden for components
Set up TR_EXPORT as an API marker
Add build glue
Margaret Wasserman [Wed, 20 Mar 2013 11:46:34 +0000 (07:46 -0400)]
Clean up compiler warnings about pointer types.
Margaret Wasserman [Wed, 20 Mar 2013 00:53:18 +0000 (20:53 -0400)]
Additional message encoding/decoding fields and functions.
Margaret Wasserman [Wed, 13 Feb 2013 10:28:53 +0000 (05:28 -0500)]
Further updates to to-do list.
Margaret Wasserman [Wed, 13 Feb 2013 09:54:39 +0000 (04:54 -0500)]
Updated README w/current status
Margaret Wasserman [Wed, 23 Jan 2013 11:42:12 +0000 (06:42 -0500)]
Internal changes to reflect merge of tpq and tid protocols.
Margaret Wasserman [Wed, 23 Jan 2013 10:50:36 +0000 (05:50 -0500)]
Reorganize code to have single TID protocol (no separate TPQ protocol).
Margaret Wasserman [Wed, 9 Jan 2013 14:49:57 +0000 (09:49 -0500)]
Updated README to reflect current status
Margaret Wasserman [Wed, 9 Jan 2013 14:35:53 +0000 (09:35 -0500)]
Fix logic error in comparison.
Margaret Wasserman [Wed, 9 Jan 2013 13:53:11 +0000 (08:53 -0500)]
Generate DH paramters using a randomly generated public key.
Margaret Wasserman [Wed, 9 Jan 2013 13:48:08 +0000 (08:48 -0500)]
Updated DH code, added code to tpqc to send DH info, removed extra gsscon messages.
Margaret Wasserman [Mon, 7 Jan 2013 21:35:44 +0000 (16:35 -0500)]
Remove binary from repository.
Margaret Wasserman [Mon, 7 Jan 2013 21:29:57 +0000 (16:29 -0500)]
Add key length to success message.
Margaret Wasserman [Mon, 7 Jan 2013 21:20:19 +0000 (16:20 -0500)]
Base DH code including DH test program.
Margaret Wasserman [Thu, 27 Dec 2012 17:28:49 +0000 (12:28 -0500)]
Update to-do list
Margaret Wasserman [Wed, 19 Dec 2012 22:06:32 +0000 (17:06 -0500)]
Update to-do list, and remove spurious space in tidrs_main.c