Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) From: ghudson@mit.edu Subject: SVN Commit X-RT-Original-Encoding: iso-8859-1 Content-Length: 1257 Add client keytab initiation support Support acquiring GSSAPI krb5 credentials by fetching initial credentials using the client keytab. Credentials obtained this way will be stored in the default ccache or collection, and will be refreshed when they are halfway to expiring. https://github.com/krb5/krb5/commit/8651f3339ccc5a623172a8edfb9cf522883acacd Author: Greg Hudson Commit: 8651f3339ccc5a623172a8edfb9cf522883acacd Branch: master doc/rst_source/krb_appldev/gssapi.rst | 62 ++++ src/appl/gss-sample/t_gss_sample.py | 23 +- src/include/k5-int.h | 1 + src/lib/gssapi/krb5/acquire_cred.c | 511 ++++++++++++++++++++++---------- src/lib/gssapi/krb5/gssapiP_krb5.h | 10 + src/lib/gssapi/krb5/iakerb.c | 68 ++--- src/lib/gssapi/krb5/init_sec_context.c | 24 -- src/lib/gssapi/krb5/rel_cred.c | 3 + src/lib/gssapi/krb5/val_cred.c | 2 +- src/tests/gssapi/Makefile.in | 8 +- src/tests/gssapi/ccinit.c | 72 +++++ src/tests/gssapi/ccrefresh.c | 80 +++++ src/tests/gssapi/t_ccselect.py | 2 +- src/tests/gssapi/t_client_keytab.py | 132 ++++++++ 14 files changed, 767 insertions(+), 231 deletions(-)