1. 20 Apr, 2017 4 commits
    • Jim Garlick's avatar
      gssapi: fail if client sets wrong principal · 4e22dd0e
      Jim Garlick authored
      Problem: if client sets ZMQ_GSSAPI_PRINCIPAL to a name
      for which credentials cannot be obtained, authentication
      proceeds with default credentials.
      
      Solution: Before initializing the security context, check
      whether there was a failed attempt to acquire credentials
      for a specific principal and bail out if so.
      
      Fixes #2531
      4e22dd0e
    • Jim Garlick's avatar
      gssapi: use GSS_C_BOTH to acquire credentials · f2b579ce
      Jim Garlick authored
      Problem: if client sets the ZMQ_GSSAPI_PRINCIPAL to a valid
      principal, authentication fails.
      
      When an application sets ZMQ_GSSAPI_PRINCIPAL, whether as a
      client or a server, libzmq internally calls gss_acquire_cred()
      with cred_usage=GSS_C_ACCEPT.  This cred_usage setting is for
      acceptors (servers) only, thus it doesn't work for initiators
      (clients).
      
      Solution: Change the cred_usage parameter to GSS_C_BOTH to allow
      initiators to set ZMQ_GSSAPI_PRINCIPAL.
      f2b579ce
    • Jim Garlick's avatar
      gssapi: document ZMQ_GSSAPI_PRINCIPAL as optional · c371824b
      Jim Garlick authored
      Problem: the ZMQ_GSSAPI_PRINCIPAL socket option is described
      as mandatory in the zmq_gssapi(7) manual page.  In fact it
      is optional.
      
      Solution: Describe ZMQ_GSSAPI_PRINCIPAL as optional.
      If unspecified, default credentials are used.
      c371824b
    • Jim Garlick's avatar
      gssapi: define HAVE_LIBGSSAPI_KRB5 in configure.ac · 43f4c286
      Jim Garlick authored
      Problem: configure.ac is not setting HAVE_LIBGSSAPI_KRB5
      in src/platform.hpp when --with-libgssapi_krb5 is specified
      
      Commit 09e868b7
      switched the libgssapi_krb5 check from AC_CHECK_LIB
      to AC_SEARCH_LIBS, but neglected to add an AC_DEFINE
      for HAVE_LIBGSSAPI_KRB5, thus the GSSAPI code is
      never compiled.
      
      Solution: Add missing AC_DEFINE of HAVE_LIBGSSAPI_KRB5.
      43f4c286
  2. 19 Apr, 2017 1 commit
    • Asmod4n's avatar
      change macOS < 10.12 clock to SYSTEM_CLOCK, fixes #2537 (#2538) · ce602d08
      Asmod4n authored
      * change macOS < 10.12 clock to SYSTEM_CLOCK, fixes #2537
      
      * remove clock_id option from alt_clock_gettime since we always want a monotonic clock.
      
      * update header definition for alt_clock_gettime
      
      * pass clock definition down to host_get_clock_service for macOS < 10.12
      
      * change to monotonic clocks
      ce602d08
  3. 17 Apr, 2017 2 commits
  4. 14 Apr, 2017 5 commits
  5. 13 Apr, 2017 1 commit
  6. 12 Apr, 2017 3 commits
  7. 11 Apr, 2017 4 commits
  8. 10 Apr, 2017 18 commits
  9. 09 Apr, 2017 2 commits