Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.420 (Entity 5.420)
From: hartmans@mit.edu
Subject: SVN Commit
X-RT-Original-Encoding: iso-8859-1
Content-Length: 1783


This ticket implements Project/Anonymous pkinit from k5wiki.  Provides
support for completely anonymous principals and untested client
support for realm-exposed anonymous authentication.

* Introduce kinit -n
* Introduce kadmin -n
* krb5_get_init_creds_opt_set_out_ccache aliases the supplied ccache
* No longer generate ad-initial-verified-cas in pkinit
* Fix pkinit interactions with non-TGT authentication

Merge remote branch 'anonymous' into trunk

Conflicts:
	src/lib/krb5/krb/gic_opt.c

https://github.com/krb5/krb5/commit/ec49e6e673ab229462ef18aa2986167eaa643643
Commit By: hartmans
Revision: 23527
Changed Files:
U   trunk/src/clients/kinit/kinit.c
U   trunk/src/include/k5-int-pkinit.h
U   trunk/src/include/k5-int.h
U   trunk/src/include/krb5/krb5.hin
U   trunk/src/kadmin/cli/kadmin.c
U   trunk/src/kdc/do_as_req.c
U   trunk/src/kdc/do_tgs_req.c
U   trunk/src/kdc/kdc_authdata.c
U   trunk/src/kdc/kdc_preauth.c
U   trunk/src/lib/gssapi/krb5/disp_name.c
U   trunk/src/lib/gssapi/krb5/import_name.c
U   trunk/src/lib/kadm5/admin.h
U   trunk/src/lib/kadm5/clnt/client_init.c
U   trunk/src/lib/kadm5/clnt/libkadm5clnt.exports
U   trunk/src/lib/kadm5/srv/libkadm5srv.exports
U   trunk/src/lib/kadm5/srv/server_init.c
U   trunk/src/lib/krb5/krb/bld_princ.c
U   trunk/src/lib/krb5/krb/chk_trans.c
U   trunk/src/lib/krb5/krb/get_in_tkt.c
U   trunk/src/lib/krb5/krb/gic_opt.c
U   trunk/src/lib/krb5/libkrb5.exports
U   trunk/src/plugins/preauth/fast_factor.h
U   trunk/src/plugins/preauth/pkinit/pkinit_clnt.c
U   trunk/src/plugins/preauth/pkinit/pkinit_crypto.h
U   trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
U   trunk/src/plugins/preauth/pkinit/pkinit_identity.c
U   trunk/src/plugins/preauth/pkinit/pkinit_lib.c
U   trunk/src/plugins/preauth/pkinit/pkinit_srv.c