[krbdev.mit.edu #8785] git commit

Greg Hudson via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Tue Mar 12 14:13:34 EDT 2019


Use memory replay cache for DO_TIME auth contexts

Instead of requiring the caller to set up a persistent replay cache
for KRB-PRIV/KRB-SAFE/KRB-CRED messages produced in DO_TIME auth
contexts, use an in-memory replay cache.

Update the API documentation for the affected functions and correct
some inaccuracies.

https://github.com/krb5/krb5/commit/0b1c78fcbdef574fb6835f0cd0a89388f4098cb5
Author: Greg Hudson <ghudson at mit.edu>
Commit: 0b1c78fcbdef574fb6835f0cd0a89388f4098cb5
Branch: master
 .gitignore                    |    1 +
 src/include/k5-int.h          |    6 ++
 src/include/krb5/krb5.hin     |  138 ++++++++++++++++++++-------------
 src/lib/krb5/krb/auth_con.c   |    1 +
 src/lib/krb5/krb/auth_con.h   |    3 +
 src/lib/krb5/krb/int-proto.h  |   11 ++-
 src/lib/krb5/krb/mk_cred.c    |   28 +++++--
 src/lib/krb5/krb/mk_priv.c    |   21 +++--
 src/lib/krb5/krb/mk_safe.c    |   23 ++++--
 src/lib/krb5/krb/privsafe.c   |   40 +++++-----
 src/lib/krb5/krb/rd_cred.c    |   17 ++---
 src/lib/krb5/krb/rd_priv.c    |   22 +++--
 src/lib/krb5/krb/rd_safe.c    |   31 +++++---
 src/lib/krb5/rcache/rc_conv.c |   20 +++++
 src/tests/Makefile.in         |   14 ++-
 src/tests/replay.c            |  172 +++++++++++++++++++++++++++++++++++++++++
 src/tests/t_replay.py         |    6 ++
 17 files changed, 414 insertions(+), 140 deletions(-)



More information about the krb5-bugs mailing list