Stef Walter
1c59844dfe
gssapi: ssh_gssapi_set_creds() is a client side function
...
It should not be guarded by the WITH_SERVER #ifdef
Signed-off-by: Stef Walter <stefw@redhat.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
(cherry picked from commit cd2dc3770a
)
2014-10-12 15:47:13 +02:00
Aris Adamantiadis
7d9940d6eb
gssapi: fix logging
2013-11-18 15:10:56 +01:00
Simo Sorce
330f6c73f6
gssapi: Fix support of delegated credentials
...
In a previous refactoring patch, the code underpinning the
ssh_gssapi_set_creds() API was inadvertently removed. This patch
fixes the problem.
Also clarify what variable holds which credentials and insure that
credentials created within the library are propelry freed.
Signed-off-by: Simo Sorce <simo@redhat.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-11-17 11:43:52 +01:00
Simo Sorce
4a3934da48
gssapi: Add support for GSSAPIDelegateCredentials config option.
...
Signed-off-by: Simo Sorce <simo@redhat.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-11-17 11:43:52 +01:00
Andreas Schneider
d364374422
gssapi: Add error checks and cleanup the code in ssh_gssapi_auth_mic().
2013-11-15 16:29:49 +01:00
Simo Sorce
00af5bd582
gssapi: Use GSSAPIClientIdentity to acquire creds
...
Signed-off-by: Simo Sorce <simo@redhat.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-11-15 16:29:49 +01:00
Andreas Schneider
651c173e72
gssapi: Add suppport to set GSSAPI server identity.
2013-11-15 16:29:49 +01:00
Simo Sorce
f76cd8b6d5
Fix gssapi credential handling.
...
- Properly acquire and inquitre credentials to get the list of available
credentials.
- Avoid enforcing a specific username it breaks some use cases (k5login).
- Remove confusing references to delegated credentials as there is no code
that actually uses delegated credentials in the initialization case.
Signed-off-by: Siom Sorce <simo@redhat.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-11-15 16:29:49 +01:00
Andreas Schneider
38420bff76
gssapi: Fix a build warning if we build without server support.
2013-07-25 10:01:38 +02:00
Andreas Schneider
6a83f9a044
gssapi: Fix include with Heimdal.
2013-07-24 20:41:41 +02:00
Andreas Schneider
e1280ce153
gssapi: Fix a memory leak in ssh_gssapi_auth_mic().
...
CID: 1046708
2013-07-23 12:27:55 +02:00
Andreas Schneider
df81a05505
cmake: Check for unistd.h.
2013-07-23 10:44:51 +02:00
Andreas Schneider
d1bbc35f33
gssapi: Add brackets in ssh_packet_userauth_gssapi_mic().
2013-07-21 11:03:00 +02:00
Andreas Schneider
f458055e9c
gssapi: Cleanup ssh_gssapi_set_creds().
2013-07-21 10:58:30 +02:00
Andreas Schneider
4103358daa
gssapi: Replace printf with SSH_LOG.
2013-07-21 10:56:47 +02:00
Andreas Schneider
0138c9fd59
gssapi: Refactor ssh_gssapi_send_mic() to not leak memory.
...
CID #0
2013-07-14 15:02:05 +02:00
Andreas Schneider
831ed08a56
gssapi: Check return values of buffer functions.
...
CID #0
2013-07-14 15:02:02 +02:00
Andreas Schneider
1467e0782e
gssapi: Remove dead code.
...
CID #0
2013-07-14 15:01:59 +02:00
Andreas Schneider
ecec2abfc7
gssapi: Refactor ssh_gssapi_build_mic() to avoid memory leaks.
...
CID #0
2013-07-14 15:01:57 +02:00
Andreas Schneider
8f0b6ccd66
gssapi: Fix a possible memory leak.
...
CID #0
2013-07-14 15:01:55 +02:00
Andreas Schneider
b4790fbdd2
gssapi: Fix a memory leak.
...
CID #0
2013-07-14 15:01:52 +02:00
Andreas Schneider
ebdd0c6ac1
src: Migrate to SSH_LOG.
2013-07-14 12:44:26 +02:00
Aris Adamantiadis
ad92740dc3
server: Fix compilation without WITH_SERVER
2013-07-14 09:30:59 +02:00
Aris Adamantiadis
c44029e5ce
gssapi: Fix indentation.
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 15:23:33 +02:00
Aris Adamantiadis
c231029be3
gssapi: Fix ticket forwarding bug
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 15:23:33 +02:00
Aris Adamantiadis
0d1ec1fa48
gssapi: Add user parameter to gssapi auth callback
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 15:03:18 +02:00
Aris Adamantiadis
0356b78ede
gssapi: remove dead code
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 15:02:52 +02:00
Aris Adamantiadis
b0ab39a6f1
gssapi: gssapi callbacks serverside
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 15:02:03 +02:00
Aris Adamantiadis
55ddc3932e
gssapi: more debug info
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 14:59:56 +02:00
Aris Adamantiadis
86ae29b30d
gssapi: implement ticket delegation
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 14:51:00 +02:00
Aris Adamantiadis
65eccf1969
gssapi: retrieve forwarded (delegated) tickets
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 14:50:56 +02:00
Aris Adamantiadis
d944310412
auth: store client's credentials
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 14:41:28 +02:00
Aris Adamantiadis
7cb6b15aaa
auth: implement client-side gssapi
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 14:41:20 +02:00
Aris Adamantiadis
7fef6e817e
auth: implement gssapi-with-mic server side
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 14:21:36 +02:00
Aris Adamantiadis
4c99f5de4d
GSSAPI: added stub
...
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
2013-07-13 14:11:26 +02:00