forked from freman/spnego-http-auth-nginx-module
-
Notifications
You must be signed in to change notification settings - Fork 0
/
ChangeLog
724 lines (487 loc) · 22.9 KB
/
ChangeLog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
Merge: d3b74ba c85a38c
Author: Andreas Roth <aroth@arsoft-online.com>
Date: Wed Jul 22 06:34:14 2015 +0200
Merge remote-tracking branch 'stnoonan/master'
Conflicts:
ngx_http_auth_spnego_module.c
commit c85a38c595c6f45609f9984c3254a33996ed587d
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Mon Jul 20 08:21:32 2015 -0400
Indentation and compile fixups after last merged pull requests
Closes #52
commit f76d5d91066451302dbb2b47252515c261ed7abf
Merge: e6eb235 48f2f02
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Thu Jul 9 07:22:41 2015 -0400
Merge pull request #50 from ppaeps/master
commit 48f2f022661422ccf58573fd0d31a8f810a9a8b9
Author: Philip Paeps <philip@trouble.is>
Date: Thu Jul 9 12:56:07 2015 +0200
Fix build for MIT Kerberos
krb5_principal_get_realm() only exists in Heimdal.
Use krb5_princ_realm() on MIT.
Tested with Heimdal 1.5 and MIT 1.13.
commit e6eb235b37c656fa87a5bd1d7ada4ddfc426f291
Merge: 29cb489 df5d674
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Jul 8 21:27:20 2015 -0400
Merge pull request #49 from ppaeps/basic_auth_fixes
commit df5d674a9f9b92c0eb79d5df5e52f084c1a5c1b3
Author: Philip Paeps <philip@trouble.is>
Date: Sat Jul 4 14:35:05 2015 +0200
Improve basic authentication and clarify semantics
Fixes a number of shortcomings in the fallback basic authentication
code and documentation:
o Document the behaviour of auth_gss_force_realm
o Make auth_gss_format_full behave consistently
o Never copy a trailing \0 into $remote_user
o Plug two small memory leaks
Arguably, basic authentication should return NGX_DECLINED when
auth_gss_force_realm is configured and a different realm is given,
but preserve the original behaviour in case anyone relies on that.
commit 29cb48979593c06dffe455ab332ff42570b77150
Merge: 9134559 bfb44a0
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Apr 21 08:01:02 2015 -0400
Merge pull request #40 from oranki/master
Add troubleshooting section for header size problems
commit bfb44a0293f7fb9fcf12670b04f3e1a2f6f202c6
Author: Atte Peltomaki <apeltomaki@nvidia.com>
Date: Tue Apr 21 14:50:14 2015 +0300
Add troubleshooting section for header size problems
A common problem in large Active Directory environments.
commit d3b74ba94b43a474fffe487a89e5148905f99ac3
Merge: 3ddf4da 9134559
Author: Andreas Roth <aroth@arsoft-online.com>
Date: Fri Apr 3 11:10:44 2015 +0200
Merge remote-tracking branch 'stnoonan/master'
commit 9134559f8fd07ef549c70b9b1e4474b6d9037db4
Merge: fbcb2a9 b691aab
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Mar 25 06:37:25 2015 -0400
Merge pull request #36 from tkdchen/handle-missed-ngx_error
add missed handle on NGX_ERROR
commit b691aab35e45b93bbfb4ca9e514967203395e163
Author: Chenxiong Qi <qcxhome@gmail.com>
Date: Wed Mar 25 14:46:59 2015 +0800
add missed handle on NGX_ERROR
NGX_ERROR would be raised when some Kerberos function fails, then module will
report the authentication still succeeds.
This patch treats such errors as an internal error. That is, once NGX_ERROR is
returned from function ngx_http_auth_spnego_auth_user_gss, module will
terminate the authentication process immediately and mark it
NGX_HTTP_INTERNAL_SERVER_ERROR.
commit fbcb2a9465b1422c654fb5cb361c084253668e2e
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Mon Mar 16 15:23:54 2015 -0400
Update ChangeLog
commit 85aa8550324f7c2480a15379c46cc8175ac820d9
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Mon Mar 16 15:23:37 2015 -0400
Link to libgssapi in FreeBSD
This fixes the inability of this module to compile
on FreeBSD 10.1
commit 3ddf4da8edbfae49f0b7b55fa9f9d12d6ad56954
Author: Andreas Roth <aroth@arsoft-online.com>
Date: Wed Nov 12 07:01:03 2014 +0100
implement fallback to basic authentication when GSSAPI/Negotiate fails
commit e59a22d3cf78fe756d7b381ad0b88dfd7fa9aad6
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Oct 21 21:13:12 2014 -0400
Add additional log and debug statements for bogus auth
commit fa728d2de80001d41f539783b21977a4aa493c65
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Oct 1 20:54:21 2014 -0400
Describe bogus auth header in readme
Closes #25
commit 7292bce3d890f67288464939e0ce4c775e2337fe
Merge: 02df21c b916c72
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Thu Aug 21 22:01:02 2014 -0400
Merge pull request #24 from neirbowj/illuminated_bogus
Hint at the origin of the bogus password
commit b916c7235fa1e3db669e57c89db1baae79151574
Author: John W. O'Brien <john@saltant.com>
Date: Thu Aug 21 21:29:39 2014 -0400
Hint at the origin of the bogus password
commit 02df21c146858ac1a424ee525341027c18e022a6
Merge: d9af45f d536d2e
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Aug 19 21:49:10 2014 -0400
Merge branch 'gsskrb5_register_acceptor_identity'
Closes #22
commit d536d2e80ea47fe9425a7bddb67f61b63560ccde
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Mon Aug 18 20:54:18 2014 -0400
Correct all arguments and logic for keytabs
Must have been three-quarters asleep when I wrote
that code. kt_env for the env variable, kt for the
gsskrb5 call.
commit 1ecea2aa9f2c239db94af21ecabe033125e53baa
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Aug 12 22:01:31 2014 -0400
Test using gsskrb5_register_acceptor_identity
commit d9af45feb24fd63c6436c3323247ed9065f84cbc
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Fri Aug 8 10:12:05 2014 -0400
Check return value of putenv
commit 54398b3718241107fb57d175619e62913a6e4590
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Sat Jul 19 08:54:27 2014 -0400
Less specific versions in readme, add help section
commit 2723627ed875a722a805149e4458f1f3ddbba05e
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Sat Jul 19 08:12:47 2014 -0400
update ChangeLog
commit e1bd59d1308f2ecccd883758ac61bcd0ba73c854
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Sat Jul 19 07:57:17 2014 -0400
Use strlchr and strncmp where needed
commit de1924735de6c3fec862929efa9684d44c088f6e
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Sat Jul 19 07:33:46 2014 -0400
Convert remaining sprintf to snprintf
commit 9519ab75de5b63f82fc018c91884b147bd70a670
Merge: c1ce1d6 52d9c89
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Fri Jul 11 09:07:15 2014 -0400
Merge pull request #21 from aroth-arsoft/master
fix for issue remote_user and realm #19
commit 52d9c89447a27da64743e2e7e40f4ea783565163
Author: Andreas Roth <aroth@arsoft-online.com>
Date: Fri Jul 11 14:01:06 2014 +0200
use ngx_strncmp instead of ngx_strcmp to ensure to compare only the
valid part of the realm
commit c1ce1d642ef38b59896182ef4a34418283132644
Merge: 9430baa 70f4095
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Jun 24 21:41:06 2014 -0400
Merge branch 'master' of github.com:stnoonan/spnego-http-auth-nginx-module
commit 9430baa9ec1bf2d537ddbb93c166e98d3db89057
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Jun 24 21:40:55 2014 -0400
Update ChangeLog
commit 8cc8aa56e402da9057a66374040c0b8604069dec
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Jun 24 21:40:40 2014 -0400
Add missing semicolon in spnego_log_krb5_error
This resolves compilation errors when --with-debug is passed
to the configure script.
Closes #18
commit 70f4095ce0dc9e9469e244bd1d238231c7e27b40
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Jun 18 20:57:32 2014 -0400
Clarify the behavior of the module when realm is specified
The default realm is stripped, auth_gss_format_full can be used
to override this behavior.
commit 34b74d3185b38720754cf677b2a8eb82682587e3
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Jun 18 19:44:07 2014 -0400
Replace deprecated krb5_get_init_creds_opt_init()
The preferred method is to use krb5_get_init_creds_opt_{alloc,free},
as it removes a static structure that is unable to be extended.
With credit to MAXuk
commit cf04148da10b1e4ce295f9617dcf822045bf9dbf
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Jun 18 19:35:44 2014 -0400
Use krb5_get_error_message
Contributed by planbnet. This should provide extended
error messages from the underlying krb5 library when
there are failures.
commit 4a43f2f35749b38c36ffff7474284f91c1a59b8e
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Jun 18 19:06:20 2014 -0400
Add dependency information to README.md
Closes #16.
commit 50b24e59c0925b42a0b3e60401ee3741b1d46717
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Apr 22 09:10:26 2014 -0400
allow auth_gss directives in limit_except blocks
commit 46e400cb87f3576a27731cce11c2f6f421a7cefd
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Oct 16 21:55:08 2013 -0400
Update ChangeLog and README
commit d335e081f6823276c18c1fce1cc195e57a3c83af
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Oct 16 21:43:55 2013 -0400
Return 403 when user is unauthorized
These changes disallow the continuous retries and provide for
significantly better behavior when used with Chrome
Fixes stnoonan/spnego-http-auth-nginx-module#9
commit 52bd58009d68d9e94664ac8c77139431267e9cf6
Merge: a18b188 60ab7e3
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Wed Oct 16 06:15:36 2013 -0700
Merge pull request #10 from MAXuk/patch-1
Include com_err.h to define error_message
Remove make error: "warning: implicit declaration of function 'error_message'"
commit 60ab7e330f06c2dc329f1e82e99d0fb9a94cfac5
Author: MAXuk <max-2209@mail.ru>
Date: Wed Oct 16 16:58:26 2013 +0400
Remove "warning: implicit declaration of function 'error_message'"
"
cc -c -pipe -O -W -Wall -Wpointer-arith -Wno-unused-parameter -Werror -g -I /usr/local/include -I src/core -I src/event -I src/event/modules -I src/os/unix -I zlib-1.2.8 -I objs -I src/http -I src/http/modules -I src/mail -o objs/addon/spnego-http-auth-nginx-module-master/ngx_http_auth_spnego_module.o spnego-http-auth-nginx-module-master/ngx_http_auth_spnego_module.c
cc1: warnings being treated as errors
spnego-http-auth-nginx-module-master/ngx_http_auth_spnego_module.c: In function 'ngx_http_auth_spnego_basic':
spnego-http-auth-nginx-module-master/ngx_http_auth_spnego_module.c:496: warning: implicit declaration of function 'error_message'
*** [objs/addon/spnego-http-auth-nginx-module-master/ngx_http_auth_spnego_module.o] Error code 1
"
Remove this error where make nginx --add-module=spnego-http-auth-nginx-module-master
commit a18b18801f0ea75723dd14ad912596788f8cef0d
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Oct 8 16:11:35 2013 -0400
ChangeLog update
commit 56109515cbef41fe603aaba08f3e0895e3b158f7
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Oct 8 16:08:16 2013 -0400
Sane header behavior for multiple browsers
Sending a token in a 401 causes Chrome to choke
Sending multiple NEGOTIATE headers causes Firefox to loop indefinitely
trying to authenticate.
Added a new ctx entry to track the output token. This allows the header
to be set only once. Future improvement would be to stop passing
both the token and the ctx.
commit 6d90271edb3179055c604ce4d588754513627b78
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Oct 8 12:04:50 2013 -0400
Update ChangeLog/README to reflect recent changes
commit 13507c52e5d6fdcdf8ff219230a45338a5847173
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Tue Oct 8 12:02:39 2013 -0400
Do not send token in reponse unless authenticated
This causes a parsing error in Google Chrome, causing it to
display a 320 instead of a 401.
commit c6c51e7fd02d946a6863106fc27b054252e746a7
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Mon Aug 12 17:52:53 2013 +0000
pass data, not data address for auth_princs
commit 827a36357998625c9a19ece717bc4c5360984695
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Sat Aug 10 15:28:41 2013 -0400
add size check of authorized principal
The ngx_str*cmp family of functions are thin wrappers around their str*cmp
equivalents. Thus, I am doing the same style check I would do with those.
Removes the need for sys/param.h. Also updated the license file to have
the same set of authors.
commit 21eea473622bbf8aca13da88430ef68dcb5ba50a
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Sat Aug 10 14:01:21 2013 -0400
Correct usage of ngx_strncmp with ngx_str_t
commit 4d68e56121fc8bce663ab7b84857a6f4dd2281f2
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Sat Aug 10 12:51:46 2013 -0400
Provide a way to disable basic auth
While some of us would like to think every communication
occurs over SSL, this is a pipe dream. SPNEGO can be
perfectly fine over an unencrypted channel. Basic auth
cannot be. Closes #6.
commit 88c10bd2e72745f46c87c3f802f01a2248491abd
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Sat Aug 10 12:17:00 2013 -0400
Update ChangeLog
commit 524f70b58e776d7471aa3fda820b7bf5011a6fff
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Sat Aug 10 12:16:40 2013 -0400
Correct comparison of authorized principal len
Fixes #7
commit ee771851afaba99ebadc616b909bc41762a852b0
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Tue Jul 16 17:38:56 2013 +0000
Add auth_gss_authorized_principal support
This can be used to specify a list of principals that are allowed to authenticate
commit 0b40e9adaf2873578ef459ba22fda502b0e4f078
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Fri Jul 12 20:11:26 2013 +0000
Fix compile error after haphazard NTLM addition
commit 2592edb043f996bbfb3a1c8792752d6bcfb9427c
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Fri Jul 12 16:01:55 2013 -0400
Update README.md
commit 9fb57c5b043076be41d25281bd48769f4052a3e5
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Fri Jul 12 19:54:57 2013 +0000
Update documentation
commit 21995ec282ce04299d630e4fa87f2c9357b8328e
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Fri Jul 12 19:48:27 2013 +0000
Update documentation
commit 81a26f9e98eb2311ba2c6e81e9adcad85b2d59be
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Fri Jul 12 19:10:30 2013 +0000
Use proper credentials when none are specified
Rather than construct specific principal names, the correct behavior is
to use GSS_C_NO_CREDENTIAL.
Additionally, always send both basic auth and negotiate headers
commit d6ecb02b9fe1bfb7e7eac6b98be6bc133edb9b51
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Thu Jul 11 19:23:49 2013 -0400
Remove hostname directive from configuration
commit cc5514fd4c002cf70446f447decf806a3c3bd57d
Merge: 5afe502 a00bb5d
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Thu Jun 6 19:48:31 2013 -0400
Merge changes due to pull request
commit 5afe5024390e02cf92bbe79eb2131c0a1ad46384
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Thu Jun 6 19:40:46 2013 -0400
Modify README and remove TODO
While the majority usage of this module will be against a Windows domain, that is certainly not the only use case. We need to be clear that the requirements for Windows are just those and do not necessarily apply across the board.
commit 7f8ac65c7e2683c9a50cca52f3ecaaa738807746
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Thu Jun 6 19:18:16 2013 -0400
Formatting cleanup
commit a00bb5d4f6c7d8dbedd9cebd8f372e7de2c5ad69
Merge: 87bb358 413012a
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Thu Jun 6 16:34:41 2013 -0700
Merge pull request #5 from rbarrois/fix_auth_basic
Fix auth basic fallback.
commit 413012a2aa5bbdec4138448d0ff26546a1587b9d
Author: Raphaël Barrois <raphael.barrois@polytechnique.org>
Date: Fri Jun 7 01:28:10 2013 +0200
Properly send back WWW-Authenticate header on 401 (Closes #4).
commit 5062c25c64cfb0db8eaf3acb03e70b2dc40dbf22
Author: Raphaël Barrois <raphael.barrois@polytechnique.org>
Date: Fri Jun 7 00:27:14 2013 +0200
Remove buggy calls to ngx_strlen on ngx_str_t.
commit 87bb3581c4764a83517b37210f1c5119c25dc67d
Merge: f6f5271 cec02d0
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Thu Jun 6 20:25:33 2013 +0000
Merge basic auth changes from pyhalov
commit f6f5271d6d5ed9297673760e0d263ec2ab6d642d
Merge: 4e8f13e 57cb988
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Mon May 13 20:09:23 2013 -0700
Merge pull request #2 from Roguelazer/fix_segfault
fix segfault on log
commit 57cb9883d011f3b251a7a18adf318ab2aae166be
Author: James Brown <jbrown@uber.com>
Date: Mon May 13 19:50:48 2013 -0700
fix segfault on log
commit 4e8f13e16363fc90ecbd0477ec728c96d5f4a8d3
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Mon May 6 11:13:16 2013 -0300
Update README.md
Removed Windows specific references, as they are severely misleading to people working in an MIT/Heimdal only environment.
commit cec02d072286bcfdaefc1edff6f4aaf983369100
Author: Alexander Pyhalov <alp@sfedu.ru>
Date: Wed Apr 10 00:24:41 2013 +0400
Behave like apache mod_auth_krb5: if Negotiate failed, then try pure basic. Otherwise Windows clients, which doesn't belong to domain, fail.
commit b2f14e233626cda825e3fc0da115a5dbc5ed4031
Author: Alexander Pyhalov <alp@sfedu.ru>
Date: Mon Apr 8 17:55:49 2013 +0400
Made basic authorization work. Added posibility for using GSSAPI on non-default ports. Alway pass realm to nginx if forced
commit 9bd83699a325a37f17475c3dc106b46ecf86b18e
Merge: df0769d f332f1c
Author: Sean Timothy Noonan <stnoonan@obsolescence.net>
Date: Fri Apr 5 20:37:04 2013 -0700
Merge pull request #1 from ifad/master
Documentation, enhanced debugging, BOF fixes
commit f332f1c53456f79fd772f017c500aeda9e173ff7
Author: Marcello Barnaba <vjt@openssl.it>
Date: Tue Feb 19 18:31:37 2013 +0100
README
commit 6631c8aab6a94236a1470507c086be0595fb40ba
Author: Marcello Barnaba <vjt@openssl.it>
Date: Tue Feb 19 14:29:36 2013 +0100
Add myself to the list of authors
commit af8c31d8cab62f417234f47b3365b24e2709f50a
Author: Marcello Barnaba <vjt@openssl.it>
Date: Tue Feb 19 14:29:30 2013 +0100
Log the input_token, to debug failures due to NTLMSSP
commit af3a2444207c88d894c39eb08f4a90cbfbefda5c
Author: Marcello Barnaba <vjt@openssl.it>
Date: Tue Feb 19 14:29:10 2013 +0100
Silence pointer qualifier ignore warning
commit 70f88935812165ce3f1d68b3bfec7214b7e469ac
Author: Marcello Barnaba <vjt@openssl.it>
Date: Tue Feb 19 14:28:45 2013 +0100
Build fully-qualified SPN, using host name if it is not specified in config
commit b8dd3c0fbd885afb5adb93e393d4642fdc40c07a
Author: Marcello Barnaba <vjt@openssl.it>
Date: Tue Feb 19 14:26:38 2013 +0100
Fix another BOF
commit 8b1ac33bfad41d3ad81888ff8c2a1b1de11b8676
Author: Marcello Barnaba <vjt@openssl.it>
Date: Tue Feb 19 14:26:16 2013 +0100
Fix buffer overflow
commit 3b6b171c1cb8baf0c95379c608090acceed600bc
Author: Marcello Barnaba <vjt@openssl.it>
Date: Mon Feb 18 19:13:32 2013 +0100
Remove redundant -Wl option
commit df0769d7341981be88bf39b82250ad6ef0edfedd
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Thu Sep 27 14:37:58 2012 +0000
Correct the length of the host name when there is no port specified
commit 9f04ee459b469627fc92d0c573c4ae1f8933cf82
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Wed Sep 26 21:43:19 2012 +0000
Update README and bump version in Makefile
commit 44bbdef3f10aa719fa3a150001314ff508e08f87
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Wed Sep 26 21:10:52 2012 +0000
remove spnegohelp
commit fc2a777d4eb65d9f3bf14f3d6fac1a7d21f94a6a
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Wed Sep 26 20:46:37 2012 +0000
fixes GSS Negotiate fallback; reformat code for consistency
commit 0cd52c0a5ac46591b0a59b117c37939ec034ac27
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Wed Sep 26 18:56:35 2012 +0000
NULL ==
commit 68ef07d74e62d04e7c07d5021c7a220a71ee63c4
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Wed Sep 26 18:26:09 2012 +0000
replace references to unsigned char with u_char since we have it
commit 6f2a2bb8eca53d11844aa83ba50ef43968c0ce98
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Wed Sep 26 17:30:44 2012 +0000
Revert changes that required gss_nt_krb5_name instead of GSS_C_NT_HOSTBASED_SERVICE
commit 3ed44df57ae51cf2595550acbe65ec6ecb6d2f76
Author: Sean Noonan <sean.noonan@twosigma.com>
Date: Wed Sep 26 17:12:44 2012 +0000
Work properly when run on non-standard ports
commit 117fbd8b11b9c153fc909797cbae43407f52a754
Author: Pavel Plesov <pavel.plesov@gmail.com>
Date: Wed Feb 15 17:58:35 2012 +0400
Fix memory allocation in Basic auth
commit c2035a7b1c900491fb3df2ea50f52fcb34f6be2f
Author: Pavel Plesov <pavel.plesov@gmail.com>
Date: Wed Feb 15 17:40:20 2012 +0400
Fix build and link with MIT Kerberos 1.9.2
commit 6c4193f009614c047f94b68b8e1b0c2ef806836d
Merge: 3cfbb2d 8ac7acf
Author: Pavel Plesov <pavel.plesov@gmail.com>
Date: Wed Feb 15 18:11:41 2012 +0400
Merge remote-tracking branch 'muhgatus/master'
commit 3cfbb2d04d992ab69dd51f49bde9827aa4f88693
Author: Pavel Plesov <pavel.plesov@gmail.com>
Date: Wed Feb 15 17:35:29 2012 +0400
Fix link with local build of spnegohelp
commit 06a9a5feffd8fb164c188f7ffbea40351672df3b
Merge: d96a011 8c18ff7
Author: Pavel Plesov <pavel.plesov@gmail.com>
Date: Wed Feb 15 18:07:35 2012 +0400
Merge remote-tracking branch 'solj/master'
commit d96a011d9561bd2a7845e17f4b89309d7c064d8f
Author: Pavel Plesov <pavel.plesov@gmail.com>
Date: Wed Feb 15 13:54:53 2012 +0400
Add FreeBSD to build configuration
commit 8ac7acf97196c7f8233b88ddabbef1e132182698
Author: muhgatus <github@abraumhal.de>
Date: Wed Feb 8 10:02:14 2012 +0100
added basic auth via kerberos
commit 8c18ff7bd857ba838ee4136663165ee6e646d001
Author: Sol Jerome <sol.jerome@gmail.com>
Date: Thu Sep 29 17:25:09 2011 -0500
gitignore: Ignore non-source files
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
commit ba87108541e7b2b1e9470265b74ef93a43f811cf
Author: Michael Shadle <mike503@gmail.com>
Date: Thu Jun 10 02:01:36 2010 -0700
Minor typo in README
commit 27ff31a356dad663dcc480f9b088520af9ba165a
Author: Michael Shadle <mike503@gmail.com>
Date: Thu Jun 10 01:56:50 2010 -0700
initial commit, please read README!