summaryrefslogtreecommitdiff
path: root/sys/src/libauth
AgeCommit message (Collapse)Author
2022-12-25auth: use caphash and capuse under /dev instead of #¤cinap_lenrek
2022-12-12libauth: aand also fix the leak it in the deactivated codecinap_lenrek
2022-12-12libauth: Fix a memory leak in auth_getkey (thanks josiah fentsos)cinap_lenrek
2022-05-28auth/newns: add chdev commandJacob Moody
2020-12-23libauth: re-implement procsetuser() to use /proc instead of #c/usercinap_lenrek
2020-12-19libauth: add procsetuser() function to change user id of the calling processcinap_lenrek
Provide a central function to change the user id of the calling process. This is mostly used by programs to become the none user, followed by a call to newns().
2020-12-09backout OCEXEC changes when potentially opening /srv filescinap_lenrek
Opening a /srv file sets the close-on-exec flag on the shared channel breaking the exportfs openmount() hack. The devsrv tries to prevent posting a channel with the close-on-exec or remove-on-close flags. but nothing currently prevents this poisoning on open. Until this gets fixed in eigther exportfs or devsrv, i'll back out the changes that could have potential side effects like this.
2020-12-07libauth: open internal file-descriptors with OCEXEC flagcinap_lenrek
2020-05-02make bind(2) error handling consistentcinap_lenrek
The mount() and bind() syscalls return -1 on error, and the mountid sequence number on success. The manpage states that the mountid sequence number is a positive integer, but the kernels implementation currently uses a unsigned 32-bit integer and does not guarantee that the mountid will not become negative. Most code just cares about the error, so test for the -1 error value only.
2019-08-02libauth: do not set errstr in auth_rpc() for ARdone result (thanks majiru)cinap_lenrek
2018-05-20separate MSCHAP(v2) and NTLM(v2) authenticationcinap_lenrek
due to linux omiting the final Z(4) in the NTLMv2 reply, and the need for the windom for LMv2 authentication, here is a new AuthNTLM ticket request now with length and dom fields.
2018-01-21libauth: add auth_respondAI() function to get AuthInfo for mschap/mschapv2cinap_lenrek
2018-01-02libauth: simplify _attrfmt() using fmtprint() avoiding stack buffercinap_lenrek
2018-01-02libauth: remove auth_wep() function, and non-existing httpauth() declarationcinap_lenrek
2018-01-01libauth: fix out of bounds memory access in _parseattr()cinap_lenrek
empty token would read ""[-1] accidentally in the AttrQuery case.
2017-12-03libauth: replace proto=p9cr with new proto=dp9ik/p9sk1 role=login for ↵cinap_lenrek
auth_userpasswd()
2016-12-22libauth: don't attempt to mount when opening mount srv file fails in nsop()cinap_lenrek
making newnsdebug error messages more usefull...
2016-08-04libauth: fix mount file-descriptor leak in auth_chuid()cinap_lenrek
2016-05-04remove support for import command in namespace filescinap_lenrek
2016-04-10libauth: remove unneeded includes for authsrv.h, avoid pulling in dependency ↵cinap_lenrek
for rerrstr()
2016-01-06auth: release dp9ik implementation and reentrant factotumcinap_lenrek
2015-08-19libauthsrv: generalize ticket service, not hardcoding ticket format and DES ↵cinap_lenrek
encryption this is in preparation for replacing DES ticket encryption with something better. but first need to make the code stop making assumptions. the wire encoding of the Ticket might be variable length with TICKETLEN just giving an upper bound. the details will be handled by libauthsrv _asgetticket() and _asgetresp() funciotns. the Authenticator and Passwordreq structures are encrypted with the random ticket key. The encryption schmeme will depend on the Ticket format used, so we pass the Ticket* structure instead of the DES key. introduce Authkey structure that will hold all the required cryptographic keys instead of passing DES key.
2014-05-24libauth: dont print blobs in auth_proxy error stringscinap_lenrek
2013-09-16libauth: add sanity check for auth_proxy write sizecinap_lenrek
2013-04-11libauth: auth_chuid empty (from sources)cinap_lenrek
instead of an "i/o count too small", detect a missing capability (empty, null string) before the write, and diagnose it as such.
2011-03-30Import sources from 2011-03-30 iso image - libTaru Karttunen
2011-03-30Import sources from 2011-03-30 iso imageTaru Karttunen