| From: | ghudson@mit.edu |
| Subject: | git commit |
Use memory replay cache for DO_TIME auth contexts
Instead of requiring the caller to set up a persistent replay cache
for KRB-PRIV/KRB-SAFE/KRB-CRED messages produced in DO_TIME auth
contexts, use an in-memory replay cache.
Update the API documentation for the affected functions and correct
some inaccuracies.
https://github.com/krb5/krb5/commit/0b1c78fcbdef574fb6835f0cd0a89388f4098cb5
Author: Greg Hudson <ghudson@mit.edu>
Commit: 0b1c78fcbdef574fb6835f0cd0a89388f4098cb5
Branch: master
.gitignore | 1 +
src/include/k5-int.h | 6 ++
src/include/krb5/krb5.hin | 138 ++++++++++++++++++++-------------
src/lib/krb5/krb/auth_con.c | 1 +
src/lib/krb5/krb/auth_con.h | 3 +
src/lib/krb5/krb/int-proto.h | 11 ++-
src/lib/krb5/krb/mk_cred.c | 28 +++++--
src/lib/krb5/krb/mk_priv.c | 21 +++--
src/lib/krb5/krb/mk_safe.c | 23 ++++--
src/lib/krb5/krb/privsafe.c | 40 +++++-----
src/lib/krb5/krb/rd_cred.c | 17 ++---
src/lib/krb5/krb/rd_priv.c | 22 +++--
src/lib/krb5/krb/rd_safe.c | 31 +++++---
src/lib/krb5/rcache/rc_conv.c | 20 +++++
src/tests/Makefile.in | 14 ++-
src/tests/replay.c | 172 +++++++++++++++++++++++++++++++++++++++++
src/tests/t_replay.py | 6 ++
17 files changed, 414 insertions(+), 140 deletions(-)