geos_one/CASA
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
3a4a7fec0d
CASA/CASA-auth-token/client/library/mechanisms/pwd
History
Juan Carlos Luciani 3a4a7fec0d Made the following changes: 
- Use host name specified in ObtainAuthToken call instead of the
    normalized host name to connect to the ATS to avoid problems
    when the host name obtained through a reverse DNS lookup fails
    to resolve via a forward DNS lookup.

  - Added the capability log debug messages to a file.

  - Added method to the ConfigIf to free memory returned by calls to
    getEntryValue to avoid issues related to freeing memory allocated
    with a heap different than the one owned by the library freeing
    the memory.
2007-03-05 06:48:26 +00:00
..
linux CASA-auth-token-client: rename lib directory to library and change in makefile 2007-01-03 05:04:26 +00:00
windows Made the following changes: 2007-03-05 06:48:26 +00:00
get.c More changes to resolve issues brought up during the security 2007-02-06 22:09:00 +00:00
interface.c Made the following changes: 2007-03-05 06:48:26 +00:00
internal.h Made the following changes: 2007-03-05 06:48:26 +00:00
Makefile.am CASA-auth-token-client: rename lib directory to library and change in makefile 2007-01-03 05:04:26 +00:00
README CASA-auth-token-client: rename lib directory to library and change in makefile 2007-01-03 05:04:26 +00:00
TODO CASA-auth-token-client: rename lib directory to library and change in makefile 2007-01-03 05:04:26 +00:00
util.c Made the following changes: 2007-03-05 06:48:26 +00:00

README 

/***********************************************************************
 * 
 *  Copyright (C) 2006 Novell, Inc. All Rights Reserved.
 *
 *  This library is free software; you can redistribute it and/or
 *  modify it under the terms of the GNU Lesser General Public
 *  License as published by the Free Software Foundation; version 2.1
 *  of the License.
 *
 *  This library is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 *  Library Lesser General Public License for more details.
 *
 *  You should have received a copy of the GNU Lesser General Public
 *  License along with this library; if not, Novell, Inc.
 * 
 *  To contact Novell about this file by physical or electronic mail, 
 *  you may find current contact information at www.novell.com.
 * 
 *  Author: Juan Carlos Luciani <jluciani@novell.com>
 *
 ***********************************************************************/
/***********************************************************************
 *
 *  README for pwmech
 *
 ***********************************************************************/

INTRODUCTION

pwmech is a client authentication mechanism for the support of username
and password authenticaton. The mechanism leverages the credentials stored
in the miCASA cache and does not prompt the user for credentials.

SECURITY CONSIDERATIONS

The tokens that pwmech generates contain the user's username and password,
this mandates that the auth_token client utilize a secure channel when
transfering them to the ATS.