if (acquire_cred) {
edg_wll_GssCred newcred = NULL;
- if (edg_wll_gss_acquire_cred_gsi(
+ if (edg_wll_gss_acquire_cred(
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_cert_filename,
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_key_filename,
+ GSS_C_INITIATE,
&newcred, &gss_stat)) {
edg_wll_SetErrorGss(ctx, "failed to load GSI credentials", &gss_stat);
goto err;
if (acquire_cred) {
edg_wll_GssCred newcred = NULL;
- if (edg_wll_gss_acquire_cred_gsi(
+ if (edg_wll_gss_acquire_cred(
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_cert_filename,
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_key_filename,
+ GSS_C_ACCEPT,
&newcred, &gss_stat)) {
edg_wll_SetErrorGss(ctx, "failed to load GSI credentials", &gss_stat);
goto err;
break;
case 'O':
if (excl) { usage("new"); return EX_USAGE; } else excl = 1;
- if ( !edg_wll_gss_acquire_cred_gsi(NULL, NULL, &mycred, &gss_code) )
+ if ( !edg_wll_gss_acquire_cred(NULL, NULL, GSS_C_INITIATE, &mycred, &gss_code) )
{
conditions[i] = (edg_wll_QueryRec *)calloc(2,sizeof(edg_wll_QueryRec));
conditions[i][0].attr = EDG_WLL_QUERY_ATTR_OWNER;
edg_wll_poolUnlock();
/* acquire gss credentials */
- ret = edg_wll_gss_acquire_cred_gsi(
+ ret = edg_wll_gss_acquire_cred(
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_cert_filename,
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_key_filename,
+ GSS_C_INITIATE,
&ctx->connections->connPool[index].gsiCred, &gss_stat);
/* give up if unable to acquire prescribed credentials, otherwise go on anonymously */
if (ret && ctx->p_proxy_filename) {
int opt;
/* acquire gss credentials */
- ret = edg_wll_gss_acquire_cred_gsi(
+ ret = edg_wll_gss_acquire_cred(
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_cert_filename,
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_key_filename,
+ GSS_C_INITIATE,
&ctx->connections->connPool[index].gsiCred, &gss_stat);
/* give up if unable to acquire prescribed credentials, otherwise go on anonymously */
edg_wlc_JobIdGetServerParts(ctx->p_jobid,&host,&port);
port +=1;
/* acquire gss credentials */
- ret = edg_wll_gss_acquire_cred_gsi(
+ ret = edg_wll_gss_acquire_cred(
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_cert_filename,
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_key_filename,
+ GSS_C_INITIATE,
&cred, &gss_stat);
/* give up if unable to acquire prescribed credentials, otherwise go on anonymously */
if (ret && ctx->p_proxy_filename) {
err = edg_wll_gss_acquire_cred(
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_cert_filename,
ctx->p_proxy_filename ? ctx->p_proxy_filename : ctx->p_key_filename,
+ GSS_C_INITIATE,
&cred, &gss_stat);
/* give up if unable to acquire prescribed credentials */
if (err) {
}
cred_handle->creds = NULL;
cred_handle->counter = 0;
- ret = edg_wll_gss_acquire_cred_gsi(cert_file, key_file, &cred_handle->creds, &gss_stat);
+ ret = edg_wll_gss_acquire_cred(cert_file, key_file, GSS_C_INITIATE, &cred_handle->creds, &gss_stat);
if (ret) {
char *gss_err = NULL;
if (ret < 0)
glite_common_log(LOG_CATEGORY_SECURITY,LOG_PRIORITY_WARN,"edg_wll_gss_watch_creds failed, unable to access credentials\n");
/* XXX DK: support noAuth */
- ret = edg_wll_gss_acquire_cred_gsi(cert_file, key_file, &cred, &gss_stat);
+ ret = edg_wll_gss_acquire_cred(cert_file, key_file, GSS_C_ACCEPT, &cred, &gss_stat);
if (ret) {
/* XXX DK: call edg_wll_gss_get_error() */
glite_common_log(LOG_CATEGORY_CONTROL,LOG_PRIORITY_FATAL,"Failed to get GSI credentials. Exiting.\n");
edg_wll_GssCred newcred;
case 0: break;
case 1:
- ret = edg_wll_gss_acquire_cred_gsi(cert_file,key_file,&newcred,&gss_stat);
+ ret = edg_wll_gss_acquire_cred(cert_file,key_file,GSS_C_ACCEPT, &newcred,&gss_stat);
if (ret) {
glite_common_log(LOG_CATEGORY_SECURITY,LOG_PRIORITY_WARN,"Reloading credentials failed, continue with older\n");
} else {
edg_wll_GssCred new_creds = NULL;
int int_ret;
- int_ret = edg_wll_gss_acquire_cred_gsi(cert_file,key_file,
+ int_ret = edg_wll_gss_acquire_cred(cert_file,key_file, GSS_C_INITIATE,
&new_creds, NULL);
if (new_creds != NULL) {
if(pthread_mutex_lock(&cred_handle_lock) < 0)
ret = edg_wll_gss_watch_creds(server_cert, &cert_mtime);
if (ret < 0)
glite_common_log(LOG_CATEGORY_SECURITY,LOG_PRIORITY_WARN,"edg_wll_gss_watch_creds failed, unable to access credentials\n");
- if ( !edg_wll_gss_acquire_cred_gsi(server_cert, server_key, &mycred, &gss_code) && mycred->name != NULL)
+ if ( !edg_wll_gss_acquire_cred(server_cert, server_key, GSS_C_ACCEPT, &mycred, &gss_code) && mycred->name != NULL)
{
glite_common_log(LOG_CATEGORY_CONTROL, LOG_PRIORITY_INFO, "Server identity: %s", mycred->name);
server_subject = strdup(mycred->name);
switch ( edg_wll_gss_watch_creds(server_cert, &cert_mtime) ) {
case 0: break;
case 1:
- if ( !edg_wll_gss_acquire_cred_gsi(server_cert, server_key, &newcred, &gss_code) ) {
+ if ( !edg_wll_gss_acquire_cred(server_cert, server_key, GSS_C_ACCEPT, &newcred, &gss_code) ) {
glite_common_log(LOG_CATEGORY_SECURITY, LOG_PRIORITY_INFO, "[%d] reloading credentials successful", getpid());
edg_wll_gss_release_cred(&mycred, NULL);
mycred = newcred;
break;
}
#else
- if ( !edg_wll_gss_acquire_cred_gsi(server_cert, server_key, &newcred, &gss_code) ) {
+ if ( !edg_wll_gss_acquire_cred(server_cert, server_key, GSS_C_ACCEPT, &newcred, &gss_code) ) {
glite_common_log(LOG_CATEGORY_SECURITY, LOG_PRIORITY_INFO, "[%d] reloading credentials successful", getpid());
edg_wll_gss_release_cred(&mycred, NULL);
mycred = newcred;
free(pdata);
return ENOMEM;
}
- if ( edg_wll_gss_acquire_cred_gsi(NULL, NULL, &pdata->ctx->cred, &gss_code) ) {
+ if ( edg_wll_gss_acquire_cred(NULL, NULL, GSS_C_ACCEPT, &pdata->ctx->cred, &gss_code) ) {
/* XXX: Let user know, that cred. load failed. Somehow...
*/
glite_gsplugin_free_context(pdata->ctx);
if ( ctx->cred == NULL ) {
pdprintf(("GSLITE_GSPLUGIN: loading default credentials\n"));
- ret = edg_wll_gss_acquire_cred_gsi(NULL, NULL,
+ ret = edg_wll_gss_acquire_cred(NULL, NULL, GSS_C_INITIATE,
&ctx->cred, &gss_stat);
if ( ret ) {
msg = "failed to load GSI credentials";