git.tremily.us Git - krb5.git/commit

author	Sam Hartman <hartmans@mit.edu>
	Mon, 28 Dec 2009 17:15:30 +0000 (17:15 +0000)
committer	Sam Hartman <hartmans@mit.edu>
	Mon, 28 Dec 2009 17:15:30 +0000 (17:15 +0000)
commit	ec49e6e673ab229462ef18aa2986167eaa643643
tree	625dba55e939a0073cf69f7b79c8c0010df991eb	tree \| snapshot
parent	c5479d0c5b29430a49cf3683513c1223a173ac4e	commit \| diff

Anonymous support for Kerberos

This ticket implements Project/Anonymous pkinit from k5wiki. Provides
support for completely anonymous principals and untested client
support for realm-exposed anonymous authentication.

* Introduce kinit -n
* Introduce kadmin -n
* krb5_get_init_creds_opt_set_out_ccache aliases the supplied ccache
* No longer generate ad-initial-verified-cas in pkinit
* Fix pkinit interactions with non-TGT authentication

Merge remote branch 'anonymous' into trunk

Conflicts:
src/lib/krb5/krb/gic_opt.c

ticket: 6607
Tags: enhancement

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23527 dc483132-0cff-0310-8789-dd5450dbe970

28 files changed:

src/clients/kinit/kinit.c		diff \| blob \| history
src/include/k5-int-pkinit.h		diff \| blob \| history
src/include/k5-int.h		diff \| blob \| history
src/include/krb5/krb5.hin		diff \| blob \| history
src/kadmin/cli/kadmin.c		diff \| blob \| history
src/kdc/do_as_req.c		diff \| blob \| history
src/kdc/do_tgs_req.c		diff \| blob \| history
src/kdc/kdc_authdata.c		diff \| blob \| history
src/kdc/kdc_preauth.c		diff \| blob \| history
src/lib/gssapi/krb5/disp_name.c		diff \| blob \| history
src/lib/gssapi/krb5/import_name.c		diff \| blob \| history
src/lib/kadm5/admin.h		diff \| blob \| history
src/lib/kadm5/clnt/client_init.c		diff \| blob \| history
src/lib/kadm5/clnt/libkadm5clnt.exports		diff \| blob \| history
src/lib/kadm5/srv/libkadm5srv.exports		diff \| blob \| history
src/lib/kadm5/srv/server_init.c		diff \| blob \| history
src/lib/krb5/krb/bld_princ.c		diff \| blob \| history
src/lib/krb5/krb/chk_trans.c		diff \| blob \| history
src/lib/krb5/krb/get_in_tkt.c		diff \| blob \| history
src/lib/krb5/krb/gic_opt.c		diff \| blob \| history
src/lib/krb5/libkrb5.exports		diff \| blob \| history
src/plugins/preauth/fast_factor.h		diff \| blob \| history
src/plugins/preauth/pkinit/pkinit_clnt.c		diff \| blob \| history
src/plugins/preauth/pkinit/pkinit_crypto.h		diff \| blob \| history
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c		diff \| blob \| history
src/plugins/preauth/pkinit/pkinit_identity.c		diff \| blob \| history
src/plugins/preauth/pkinit/pkinit_lib.c		diff \| blob \| history
src/plugins/preauth/pkinit/pkinit_srv.c		diff \| blob \| history

MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.

RSS Atom