[krbdev.mit.edu #6607] SVN Commit

Sam Hartman via RT rt-comment at krbdev.mit.edu
Mon Dec 28 12:15:32 EST 2009


This ticket implements Project/Anonymous pkinit from k5wiki.  Provides
support for completely anonymous principals and untested client
support for realm-exposed anonymous authentication.

* Introduce kinit -n
* Introduce kadmin -n
* krb5_get_init_creds_opt_set_out_ccache aliases the supplied ccache
* No longer generate ad-initial-verified-cas in pkinit
* Fix pkinit interactions with non-TGT authentication

Merge remote branch 'anonymous' into trunk

Conflicts:
	src/lib/krb5/krb/gic_opt.c

http://src.mit.edu/fisheye/changelog/krb5/?cs=23527
Commit By: hartmans
Revision: 23527
Changed Files:
U   trunk/src/clients/kinit/kinit.c
U   trunk/src/include/k5-int-pkinit.h
U   trunk/src/include/k5-int.h
U   trunk/src/include/krb5/krb5.hin
U   trunk/src/kadmin/cli/kadmin.c
U   trunk/src/kdc/do_as_req.c
U   trunk/src/kdc/do_tgs_req.c
U   trunk/src/kdc/kdc_authdata.c
U   trunk/src/kdc/kdc_preauth.c
U   trunk/src/lib/gssapi/krb5/disp_name.c
U   trunk/src/lib/gssapi/krb5/import_name.c
U   trunk/src/lib/kadm5/admin.h
U   trunk/src/lib/kadm5/clnt/client_init.c
U   trunk/src/lib/kadm5/clnt/libkadm5clnt.exports
U   trunk/src/lib/kadm5/srv/libkadm5srv.exports
U   trunk/src/lib/kadm5/srv/server_init.c
U   trunk/src/lib/krb5/krb/bld_princ.c
U   trunk/src/lib/krb5/krb/chk_trans.c
U   trunk/src/lib/krb5/krb/get_in_tkt.c
U   trunk/src/lib/krb5/krb/gic_opt.c
U   trunk/src/lib/krb5/libkrb5.exports
U   trunk/src/plugins/preauth/fast_factor.h
U   trunk/src/plugins/preauth/pkinit/pkinit_clnt.c
U   trunk/src/plugins/preauth/pkinit/pkinit_crypto.h
U   trunk/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
U   trunk/src/plugins/preauth/pkinit/pkinit_identity.c
U   trunk/src/plugins/preauth/pkinit/pkinit_lib.c
U   trunk/src/plugins/preauth/pkinit/pkinit_srv.c




More information about the krb5-bugs mailing list