Skip Menu |
 

From: ghudson@mit.edu
Subject: git commit

Add KDC pre-send and post-receive KDC hooks

Add two new APIs, krb5_set_kdc_send_hook() and
krb5_set_kdc_recv_hook(), which can be used to inspect and override
messages sent to KDCs.

[ghudson@mit.edu: style and documentation changes]

https://github.com/krb5/krb5/commit/fb4d426ddeb9d4802a53dfbd74189ef8eacbe65e
Author: Andreas Schneider <asn@samba.org>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: fb4d426ddeb9d4802a53dfbd74189ef8eacbe65e
Branch: master
doc/appdev/refs/api/index.rst | 2 +
doc/appdev/refs/types/index.rst | 2 +
src/include/k5-int.h | 6 ++
src/include/krb5/krb5.hin | 104 +++++++++++++++++++++++++++++++++++++++
src/lib/krb5/libkrb5.exports | 2 +
src/lib/krb5/os/sendto_kdc.c | 56 ++++++++++++++++++++-
src/lib/krb5_32.def | 4 ++
7 files changed, 174 insertions(+), 2 deletions(-)
From: ghudson@mit.edu
Subject: git commit

Add tests for send and receive sendto_kdc hooks

[ghudson@mit.edu: style changes]

https://github.com/krb5/krb5/commit/117f6e415238b507a42cbc3ccdb45ad8408bfdfd
Author: Andreas Schneider <asn@samba.org>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 117f6e415238b507a42cbc3ccdb45ad8408bfdfd
Branch: master
.gitignore | 1 +
src/tests/Makefile.in | 18 ++--
src/tests/deps | 10 ++
src/tests/hooks.c | 253 +++++++++++++++++++++++++++++++++++++++++++++++++
src/tests/t_hooks.py | 9 ++
5 files changed, 284 insertions(+), 7 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Fix calling conventions

Commit fb4d426ddeb9d4802a53dfbd74189ef8eacbe65e added two new APIs but
didn't make the KRB5_CALLCONV decorations consistent between
declarations and definitions. This broke the build on Windows.

https://github.com/krb5/krb5/commit/0f1c3d7bbe6fec23d4c64f5b69d0cd9c5f046cd8
Author: Tom Yu <tlyu@mit.edu>
Commit: 0f1c3d7bbe6fec23d4c64f5b69d0cd9c5f046cd8
Branch: master
src/lib/krb5/os/sendto_kdc.c | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
From: ghudson@mit.edu
Subject: git commit

Amend KDC hook documentation

In the Doxygen comments for the new APIs and types, include @version
tags indicating that they are new in 1.15, and put @param declarations
just after the brief message for consistency with other comments.

https://github.com/krb5/krb5/commit/048049230d7e60c90ad40e6c3b7a8a43c4c5af5b
Author: Greg Hudson <ghudson@mit.edu>
Commit: 048049230d7e60c90ad40e6c3b7a8a43c4c5af5b
Branch: master
src/include/krb5/krb5.hin | 46 ++++++++++++++++++++++++++------------------
1 files changed, 27 insertions(+), 19 deletions(-)
From: ghudson@mit.edu
Subject: git commit

Fix use_master handling with KDC hook reply

A post-receive KDC hook may synthesize a reply if k5_sendto() returns
an error. If this happens, krb5_sendto_kdc() must not use server_used
to check if the reply came from a master KDC, as it does not have a
valid value. Preemptively set *use_master to 1 in this case to bypass
the check.

https://github.com/krb5/krb5/commit/603a14f9eb8a81556502fcdc5fac65f0d4f323dc
Author: Greg Hudson <ghudson@mit.edu>
Commit: 603a14f9eb8a81556502fcdc5fac65f0d4f323dc
Branch: master
src/lib/krb5/os/sendto_kdc.c | 9 ++++++++-
1 files changed, 8 insertions(+), 1 deletions(-)