OpenAFS Master Repository branch, openafs-stable-1_6_x, updated. openafs-stable-1_6_4-14-g2f411f4

[Gerrit Code Review]

The following commit has been merged in the openafs-stable-1_6_x branch:
commit 95d57c74476c5a02ce6d9ca913dcbf88ac5c1143
Author: Ben Kaduk <kaduk@mit.edu>
Date:   Tue May 14 19:37:59 2013 -0400

    Clean up akimpersonate and use for server-to-server
    
    Since a6d7cacfd, aklog has been able to print a krb5 ticket to
    itself for an arbitrary client principal, allowing a user with
    access to the cell's krb5 key to get tokens as an arbitrary user.
    
    Now that it is possible to use native krb5 tickets with non-DES
    enctypes for authentication, and akimpersonate is available from libauth,
    use printed native krb5 tickets for server-to-server communication (as well
    as the -localauth versions of the client utilities).
    
    Remove the early call to afsconf_GetLatestKey() in
    afsconf_PickClientSecObj() so that we do not end up picking an old DES
    key before we try to find a better key to use.
    
    Before doing so, refactor the akimpersonate code to be more usable
    and readable, and eliminate some dead code.  For example, we always printed
    addressless tickets, so that code could be removed.  Other code had excessive
    stack usage for a library routine, which is eliminated.  Use a start time
    of 0 instead of 300 so that the printed ticket will always be
    detected as infinite-lifetime.
    
    In order to ensure usability on all platforms (in particular Solaris),
    provide a couple more compat shims to implement routines which are not
    always available from the krb5 library, in particular encode_krb5_ticket
    and encode_krb5_enc_tkt_part.  Thanks to Andrew Deason for implementing
    these compatability routines.
    
    UKERNEL doesn't need this stuff.

 src/aklog/aklog.c               |    9 +-
 src/auth/Makefile.in            |    9 +-
 src/auth/akimpersonate.c        |  839 +++++++++++++++++++++++++++------------
 src/auth/akimpersonate.h        |    2 +-
 src/auth/akimpersonate_v5gen.c  |  175 ++++++++
 src/auth/akimpersonate_v5gen.h  |   30 ++
 src/auth/authcon.c              |   88 ++++-
 src/libafsauthent/Makefile.in   |    5 +-
 src/rxkad/Makefile.in           |    2 +-
 src/shlibafsauthent/Makefile.in |    5 +-
 src/shlibafsrpc/libafsrpc.map   |    4 +
 11 files changed, 903 insertions(+), 265 deletions(-)

-- 
OpenAFS Master Repository