Skip Menu |
 

From: hartmans@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 1.7KiB

This ticket implements Project/Anonymous pkinit from k5wiki. Provides
support for completely anonymous principals and untested client
support for realm-exposed anonymous authentication.

* Introduce kinit -n
* Introduce kadmin -n
* krb5_get_init_creds_opt_set_out_ccache aliases the supplied ccache
* No longer generate ad-initial-verified-cas in pkinit
* Fix pkinit interactions with non-TGT authentication

Merge remote branch 'anonymous' into trunk

Conflicts:
src/lib/krb5/krb/gic_opt.c

https://github.com/krb5/krb5/commit/ec49e6e673ab229462ef18aa2986167eaa643643
Commit By: hartmans
Revision: 23527
Changed Files:
U trunk/src/clients/kinit/kinit.c
U trunk/src/include/k5-int-pkinit.h
U trunk/src/include/k5-int.h
U trunk/src/include/krb5/krb5.hin
U trunk/src/kadmin/cli/kadmin.c
U trunk/src/kdc/do_as_req.c
U trunk/src/kdc/do_tgs_req.c
U trunk/src/kdc/kdc_authdata.c
U trunk/src/kdc/kdc_preauth.c
U trunk/src/lib/gssapi/krb5/disp_name.c
U trunk/src/lib/gssapi/krb5/import_name.c
U trunk/src/lib/kadm5/admin.h
U trunk/src/lib/kadm5/clnt/client_init.c
U trunk/src/lib/kadm5/clnt/libkadm5clnt.exports
U trunk/src/lib/kadm5/srv/libkadm5srv.exports
U trunk/src/lib/kadm5/srv/server_init.c
U trunk/src/lib/krb5/krb/bld_princ.c
U trunk/src/lib/krb5/krb/chk_trans.c
U trunk/src/lib/krb5/krb/get_in_tkt.c
U trunk/src/lib/krb5/krb/gic_opt.c
U trunk/src/lib/krb5/libkrb5.exports
U trunk/src/plugins/preauth/fast_factor.h
U trunk/src/plugins/preauth/pkinit/pkinit_clnt.c
U trunk/src/plugins/preauth/pkinit/pkinit_crypto.h
U trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
U trunk/src/plugins/preauth/pkinit/pkinit_identity.c
U trunk/src/plugins/preauth/pkinit/pkinit_lib.c
U trunk/src/plugins/preauth/pkinit/pkinit_srv.c
From: ghudson@mit.edu
Subject: SVN Commit

Whitespace fixes for new anonymous support.


https://github.com/krb5/krb5/commit/92516277cb0205a1781b06d204d9d103d599f8a7
Commit By: ghudson
Revision: 23528
Changed Files:
U trunk/src/clients/kinit/kinit.c
U trunk/src/include/krb5/krb5.hin
U trunk/src/kadmin/cli/kadmin.c
U trunk/src/kdc/do_as_req.c
U trunk/src/kdc/kdc_authdata.c
U trunk/src/lib/gssapi/krb5/import_name.c
U trunk/src/lib/kadm5/clnt/client_init.c
U trunk/src/lib/krb5/krb/bld_princ.c
U trunk/src/lib/krb5/krb/chk_trans.c
U trunk/src/lib/krb5/krb/get_in_tkt.c
U trunk/src/plugins/preauth/pkinit/pkinit_clnt.c
U trunk/src/plugins/preauth/pkinit/pkinit_crypto.h
U trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
U trunk/src/plugins/preauth/pkinit/pkinit_identity.c
U trunk/src/plugins/preauth/pkinit/pkinit_srv.c
From: hartmans@mit.edu
Subject: SVN Commit

Other changes in this ticket guarantee that the padata argument to
return callbacks is non-null; don't check for null in pkinit_srv.c.

https://github.com/krb5/krb5/commit/4c2630eb315e962261c4f02e629c18e288c69060
Commit By: hartmans
Revision: 23582
Changed Files:
U trunk/src/plugins/preauth/pkinit/pkinit_srv.c