create branch for Moonshot work

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24709 dc483132-0cff-0310-8789-dd5450dbe970
Reinstate gss_userok and gss_pname_to_uid

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24710 dc483132-0cff-0310-8789-dd5450dbe970
look for gss_{wrap_size_limit,pname_to_uid} when dynamically loading mechs by symbol

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24711 dc483132-0cff-0310-8789-dd5450dbe970
make gss_acquire_cred(GSS_C_NO_OID_SET) acquire credentials for all
mechanisms rather than just the default mechanism.

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24712 dc483132-0cff-0310-8789-dd5450dbe970
If calling gss_accept_sec_context with non-NULL credentials, ensure
that you have credentials for the mechanism being accepted.

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24713 dc483132-0cff-0310-8789-dd5450dbe970
plug introduced leak in gss_acquire_cred

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24714 dc483132-0cff-0310-8789-dd5450dbe970
avoid unnecessary call to gssint_get_mechanism() in case of error path

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24715 dc483132-0cff-0310-8789-dd5450dbe970
use RTLD_FIRST to avoid pulling in dependent symbols

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24716 dc483132-0cff-0310-8789-dd5450dbe970
implement attribute-based userok authorisation logic as suggested
by Sam Hartman

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24717 dc483132-0cff-0310-8789-dd5450dbe970
revert RTLD_FIRST check

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24718 dc483132-0cff-0310-8789-dd5450dbe970
Use pointer test to avoid mechglue symbol loopback

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24719 dc483132-0cff-0310-8789-dd5450dbe970
really revert RTLD_FIRST fix

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24720 dc483132-0cff-0310-8789-dd5450dbe970
allow mechanisms to export a gss_duplicate_name SPI that supports
composite name copies (i.e. copying attributes). this was a bug.

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24721 dc483132-0cff-0310-8789-dd5450dbe970
Use PADL rather than MIT copyright for userok extensions (work
not performed under MIT contract and may be reused for other
projects)

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24731 dc483132-0cff-0310-8789-dd5450dbe970
set minor_status to KRB5_NO_LOCALNAME if pname_to_uid fails

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24732 dc483132-0cff-0310-8789-dd5450dbe970
add attribute-based implementation of gssd_pname_to_uid

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24733 dc483132-0cff-0310-8789-dd5450dbe970
return GSS_S_UNAVAILABLE on localname lookup error

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24734 dc483132-0cff-0310-8789-dd5450dbe970
add gss_pname_to_uid test to gss-server

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24735 dc483132-0cff-0310-8789-dd5450dbe970
Allow absolute paths for mechglue libraries

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24736 dc483132-0cff-0310-8789-dd5450dbe970
Implement draft-josefsson-gss-capsulate-01

git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/moonshot-mechglue-fixes@24737 dc483132-0cff-0310-8789-dd5450dbe970