geos_one/CASA
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
1,544 Commits 1 Branch 0 Tags 60 MiB
master
Commit Graph

53 Commits

Author SHA1 Message Date
S Rahul
78e69573cd Fixed a buffer overflow when client calls SetATSHostList() with 
long host names.
 2009-10-15 12:41:20 +00:00
S Rahul
b9fa3eab0c Multiple changes for Bug #543064 
1. Provided SetATSHostList() API for changing the ATS address dynamically
2. Not using CASA enabled server as ATS. ATS address has to be explicitly set
   in client.conf or through SetATSHostList()
3. Not normalizing CASA enabled server's host name while obtaining CASA tokens.
   Callers of ObtainAuthTokenEx() have to pass normalized name as argument
 2009-10-09 08:46:35 +00:00
S Rahul
2feba2710f Two changes: 
1. Enable privileged process ('system' owned) to access logged in user's
   Kerberos credential cache while authenticating to the ATS. The LUID
   of the logged in user is an input. This is required by Zenworks.
2. Fix a buffer overflow. A memory buffer was being used after being
   freed.
 2009-09-25 06:06:03 +00:00
S Rahul
f867391074 Bug#524423: Increase the maximum time that the ATS client waits for the 
ATS server to respond from 30 seconds to 120 seconds.
 2009-08-26 10:53:44 +00:00
S Rahul
f6ff95abc4 Makefile.am was referencing the wrong file - 'authtoken.dll'. The actual 
file name is 'casa_authtoken.dll'.
 2009-03-15 05:14:22 +00:00
Juan Carlos Luciani
215bd98dd5 Changing the RPC retry logic to be bounded by time rather than by the 
number of retries to match what is being done in the Windows platform.
 2008-07-09 17:51:22 +00:00
Juan Carlos Luciani
8ea377f845 Enhanced the RPC retry logic for the Windows client to be bounded by time rather than number of retries. Also, added a pause between retries to avoid saturating the network. The corresponding Linux client changes still need to be made. This changes allow us to support large number of clients against a single server. 2008-07-03 20:41:23 +00:00
Juan Carlos Luciani
e3a00efe33 Added retries for RPCs that fail due to connection errors. 2008-06-30 20:41:06 +00:00
Juan Carlos Luciani
64bd51ab2c Made changes to allow the package to build under STABLE. Also merged 
changes from the spec and changes files being maintained for builds.
 2008-06-03 17:44:40 +00:00
Juan Carlos Luciani
a8a4e9e975 Added time-stamp and process/thread information to the Windows debug logs. 2008-01-02 17:45:07 +00:00
Juan Carlos Luciani
28a4d65cc8 Added traces to aid debugging of connection and password authentication 
problems.
 2007-07-05 23:40:42 +00:00
Juan Carlos Luciani
7cc9385642 Enhanced to try to connect to the ATS with the normalized host name in addition to the host name given by the application calling to get a token to deal with cases where the application is passing a dotted ip address but the 
server's certificate has been issued using the server's DNS name.
 2007-07-05 23:25:55 +00:00
Juan Carlos Luciani
41cc9deb34 Fixed crash that occurs when the DLL is unloaded before being initialized first. 2007-06-27 22:01:44 +00:00
Juan Carlos Luciani
35ef31cafd Changed calls to _stricmp to stricmp to fix unresolved external problem 
when the setting DisableSecureConnections is configured.
 2007-06-21 22:46:40 +00:00
Juan Carlos Luciani
ad7a069507 Updated to only add non-success authtoken entries to the 
cache if the time necessary to process them exceeds 30
seconds. With this change we make sure that non-successful
entries are added to the cache to deal with server
un-available issues.
 2007-06-12 16:51:18 +00:00
Juan Carlos Luciani
f27856d545 Updated changes and todo files. 2007-06-04 17:24:49 +00:00
Juan Carlos Luciani
502559daa1 The client now tells Curl to look for certificates in /etc/ssl/certs 
under linux.

Commented the line in client.conf that was allowing clients to connect
to ATSs whose certificates authenticity could not be verified. :-).
 2007-06-01 23:26:28 +00:00
Juan Carlos Luciani
375e8d801a Fixed typo in client.conf example setting. 2007-05-30 14:35:51 +00:00
Juan Carlos Luciani
386fd61efc Fixed windows compile problems. 2007-05-30 05:03:36 +00:00
Juan Carlos Luciani
3cc4067ab1 Modified client to try to authenticate a user against a list of 
configured ATSs instead of only utilizing a single configured ATS.
The client also tries to contact the ATS using port 443 as well as
port 2645 if the port number is not hard configured.
 2007-05-29 22:59:50 +00:00
Juan Carlos Luciani
136aee12c5 Updated the project to export the APIs for flushing the AuthToken cache in x64 bit environments. 2007-04-13 19:26:44 +00:00
Juan Carlos Luciani
099e4cabfc Added flush AuthToken cache API. 2007-04-13 19:21:40 +00:00
Juan Carlos Luciani
3f0062dcf7 Fixed windows build conflict issues. 2007-04-06 03:52:43 +00:00
Juan Carlos Luciani
4826e3c2d1 Fixed project and solution issues which were keeping us from building 32bit and 64bit packages on a 64bit Windows platform. 2007-04-04 20:44:25 +00:00
Juan Carlos Luciani
53d06963fc Fixed some 64bit platform issues. 2007-04-02 23:28:47 +00:00
Juan Carlos Luciani
4da676ac00 2007-04-02 22:16:07 +00:00
Juan Carlos Luciani
5ba91c92a6 Fixed issues found when testing the auth.policy mechanism_info changes 
for the Krb5 and the Pwd mechanisms using a linux client.
 2007-03-26 21:45:10 +00:00
Juan Carlos Luciani
1c67986423 Fixing Linux build errors. 2007-03-21 23:14:10 +00:00
Juan Carlos Luciani
6a56e24838 More linux build error fixes. 2007-03-21 23:09:15 +00:00
Juan Carlos Luciani
1d1803ffb6 Fixed some build problems introduced with the mechanism_info changes. 2007-03-21 23:05:34 +00:00
Juan Carlos Luciani
e1001dfc6f Modified the Krb5 mechanisms to allow it to receive multiple settings via the authentication policy mechanism information string. This will allow to add 
new settings in the future without breaking existing clients.
 2007-03-21 22:19:05 +00:00
Juan Carlos Luciani
0eda6a0830 Added the ability to specify to the PwdMechanism through the auth.policy that it should only utilize credentials that match the specified realm. 2007-03-21 17:54:38 +00:00
soochoi
41339353cd CASA-auth-token-client windows: save vcproj with 64 bit platform added 2007-03-06 22:36:10 +00:00
Juan Carlos Luciani
4c2f384001 Resolved issues found during unit testing of file logging feature. 2007-03-05 18:01:32 +00:00
Juan Carlos Luciani
12e1705227 Fixed compile problems under linux. 2007-03-05 15:46:16 +00:00
Juan Carlos Luciani
3a4a7fec0d Made the following changes: 
- Use host name specified in ObtainAuthToken call instead of the
    normalized host name to connect to the ATS to avoid problems
    when the host name obtained through a reverse DNS lookup fails
    to resolve via a forward DNS lookup.

  - Added the capability log debug messages to a file.

  - Added method to the ConfigIf to free memory returned by calls to
    getEntryValue to avoid issues related to freeing memory allocated
    with a heap different than the one owned by the library freeing
    the memory.
 2007-03-05 06:48:26 +00:00
Juan Carlos Luciani
047797a119 Fixed function prototype miss-match that was causing a build problem on 
64bit machines.
 2007-02-16 18:13:48 +00:00
Juan Carlos Luciani
b03293da31 Fixed running library from drive different that install drive windows issue. 
Added code to not-persist tokens in the miCASA cache.
 2007-02-14 17:55:15 +00:00
Juan Carlos Luciani
81a369b7aa Corrected the name of the output debug pdb file. 2007-02-13 23:58:11 +00:00
Juan Carlos Luciani
5deee61fea Added needed defines missing in the windows environment that were keeping the components from building cleanly. 2007-02-06 23:36:07 +00:00
Juan Carlos Luciani
51ffdf0702 More changes to resolve issues brought up during the security 
review of the code.
 2007-02-06 22:09:00 +00:00
soochoi
dbe91182f6 CASA-auth-client: modify the include path in Windows solution file 2007-02-05 18:00:46 +00:00
Juan Carlos Luciani
791b0be583 Addressed issues found during the SuSE security review. 2007-02-02 23:02:43 +00:00
Juan Carlos Luciani
69f772ed91 Fixed one-byte buffer overflow problem in memcpy found during 
code review.

-This line, and those below, will be ignored--

M    linux/get.c
 2007-02-01 16:04:28 +00:00
Juan Carlos Luciani
57f18cef8c Finished the Linux side changes for the "Cleanup during library unload" 
issue.
 2007-01-29 13:04:22 +00:00
Juan Carlos Luciani
b5a6a452e8 Added code to allow us to un-initialize the library when it is unloaded. These changes allow library un-initialization to work for Windows. More code needs to be added to un-initialize the library under Linux. 2007-01-29 10:46:18 +00:00
Juan Carlos Luciani
5f0d0a486f Finished changes to resolve issues associated with server response without payload data. 
Changed the name of the .msi files to not include "-msi" as part of the names as per request.

GetAuthToken requests that fail due to a name resolution error now will return an error code indicating the reason.
 2007-01-12 12:49:25 +00:00
Juan Carlos Luciani
32093affcb Fixed crash that would occur if an RPC would succeed but no without 
response data.

-This line, and those below, will be ignored--

M    client/library/engine.c
 2007-01-12 08:43:53 +00:00
soochoi
bbf4a44deb CASA-auth-token-client: check in relative build dependencies path changes in windows solution file 2007-01-11 10:36:56 +00:00
Juan Carlos Luciani
fb29201f17 Modified solution/project files to deal with "lib" folder rename to "library". 2007-01-10 11:07:35 +00:00