Skip Menu |
 

From: ghudson@mit.edu
Subject: git commit
Download (untitled) / with headers
text/plain 1.1KiB

Add GSS_KRB5_NT_X509_CERT name type

If this name type is used for the desired_name parameter of
gss_acquire_cred_impersonate_name(), identify the S4U2Self user by
certificate. Co-authored with Purand Chand <pchand@vmware.com>.

[ghudson@mit.edu: added documentation; updated to use a boolean at the
GSS layer rather than a new krb5 name type; rewrote commit message]

https://github.com/krb5/krb5/commit/f2e28f13156785851819fc74cae52100e0521690
Author: Isaac Boukris <iboukris@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: f2e28f13156785851819fc74cae52100e0521690
Branch: master
doc/appdev/gssapi.rst | 6 ++++++
src/lib/gssapi/krb5/gssapiP_krb5.h | 1 +
src/lib/gssapi/krb5/gssapi_krb5.c | 3 +++
src/lib/gssapi/krb5/gssapi_krb5.h | 5 +++++
src/lib/gssapi/krb5/import_name.c | 12 +++++++++++-
src/lib/gssapi/krb5/s4u_gss_glue.c | 9 ++++++---
src/lib/gssapi/libgssapi_krb5.exports | 1 +
src/lib/gssapi32.def | 2 ++
src/tests/gssapi/common.c | 4 +++-
src/tests/gssapi/t_imp_name.c | 2 ++
src/tests/gssapi/t_s4u.py | 10 ++++++++++
11 files changed, 50 insertions(+), 5 deletions(-)