[krbdev.mit.edu #7964] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Wed Jul 30 13:39:18 EDT 2014


Add KCM credential cache type (client only)

Add a new credential cache type "KCM" which performs cache operations
by speaking to a Heimdal or OS X KCM daemon, via either Unix domain
sockets or (on OS X only) Mach RPC.  Add "kcm_socket" and
"kcm_mach_service" profile variables to control the socket path and
bootstrap service name respectively.  In ccmarshal.c, add
k5_marshal_mcred to marshal matching credentials in the KCM protocol
representation.

This cache type is not currently supported on Windows, as Windows does
not support Unix domain sockets.

As with the keyring cache type, the lastchange method of this cache
type is mostly useless, reporting only the time of the last change
made through that cache handle.  The KCM protocol currently has no
support for obtaining the last change time of the cache itself.

https://github.com/krb5/krb5/commit/2fa226e13ee3e7a6fddbfb68b27ed6b2c14c8474
Author: Greg Hudson <ghudson at mit.edu>
Commit: 2fa226e13ee3e7a6fddbfb68b27ed6b2c14c8474
Branch: master
 src/configure.in                      |    7 +
 src/include/k5-int.h                  |    2 +
 src/include/kcm.h                     |   95 +++
 src/lib/krb5/ccache/Makefile.in       |   20 +-
 src/lib/krb5/ccache/cc-int.h          |    3 +
 src/lib/krb5/ccache/cc_kcm.c          | 1015 +++++++++++++++++++++++++++++++++
 src/lib/krb5/ccache/ccbase.c          |    5 +
 src/lib/krb5/ccache/ccmarshal.c       |   69 +++
 src/lib/krb5/ccache/deps              |   11 +
 src/lib/krb5/ccache/kcmrpc.defs       |   56 ++
 src/lib/krb5/ccache/kcmrpc_types.h    |   39 ++
 src/lib/krb5/error_tables/k5e1_err.et |    4 +
 src/util/depfix.pl                    |    6 +
 13 files changed, 1330 insertions(+), 2 deletions(-)



More information about the krb5-bugs mailing list