lorikeet-heimdal.git
2024-02-26 Andrew Bartlettlib/krb5: Align with MIT behaviour and provide krb5_ini... lorikeet-heimdal-202402132018
2024-02-26 Jo Suttonkdc: Note that the sname of a ticket may not be relied...
2024-02-26 Jo Suttonkrb5: Consider a single‐component krbtgt principal...
2024-02-26 Jo Suttonhdb: Avoid passing a NULL pointer to strcmp()
2024-02-26 Jo Suttonkdc: Make use of krb5_principalname_is_krbtgt()
2024-02-26 Jo Suttonkrb5: Make use of krb5_principalname_is_krbtgt()
2024-02-26 Jo Suttonkrb5: Add function to determine whether a principal...
2024-02-26 Jo Suttonkcm: Make use of krb5_principal_is_krbtgt()
2024-02-26 Stefan Metzmacherkdc: introduce HDB_F_USER2USER_PRINCIPAL
2024-02-26 Jo Suttonhdb: Provide client entry to RBCD plugin
2024-02-26 Kacper Boströmkdc: support pkinit_kdc_revoke for pkinit anchors
2024-02-26 Jo Suttonpkinit: Correctly pad Diffie-Hellman key
2024-02-26 Jo Suttonkdc: Add KDC support for PKINIT Freshness extension...
2024-02-26 Jo Suttonkdc: Move TGS lookup to before preauth data validation
2024-02-26 Jo Suttonkdc: Prefer nonce in PKAuthenticator over that in reque...
2024-02-26 Jo Suttonkdc: Add support for resource-based constrained delegation
2024-02-26 Jo Suttonhdb: Add hook for resource-based constrained delegation
2024-02-26 Stefan Metzmacherkdc: add kdc_request_get_[explicit_]armor_server
2024-02-26 Jo Suttonkdc: Add KDC_AUTH_EVENT_CLIENT_FOUND authentication...
2024-02-26 Jo SuttonRevert "Verify flags after the user been required to...
2024-02-26 Jo Suttonkdc-plugin: Provide plugin with delegated proxy HDB...
2024-02-26 Jo Suttonkdc: Check server of constrained delegation evidence...
2024-02-26 Jo Suttonkdc-plugin: Make ‘client_principal’ const
2024-02-26 Jo Suttonkdc: Validate armor TGT for AS-REQs
2024-02-26 Jo Suttonkdc: Don’t update the PAC if we perform Services for...
2024-02-26 Jo Suttonkdc: Have caller perform checking for _kdc_validate_con...
2024-02-26 Jo Suttonkdc: Have _kdc_validate_protocol_transition() take...
2024-02-26 Jo Suttonkdc: Inline calls to Services for User functions
2024-02-26 Jo Suttonkdc: Provide kdc_request_get_armor_{clientdb,client...
2024-02-26 Jo Suttonkdc: Add enable_fast_cookie option (enabled by default)
2024-02-26 Jo Suttonkdc: Check lifetime of correct ticket
2024-02-26 Jo Suttonkdc: Allow e_data field of KDC request structure to...
2024-02-26 Jo Suttonkdc: Split out function to create error data
2024-02-26 Jo Suttonkdc: Add ‘e-data’ field to KDC request structure
2024-02-26 Jo Suttonkrb5: Try to decode e-data as KERB-ERROR-DATA (falling...
2024-02-26 Jo Suttonasn1: Add KERB-ERROR-DATA type
2024-02-26 Jo Suttonkdc: Do not return ETYPE-INFO if the client is locked out
2024-02-26 Jo Suttonkdc: Ensure return value is initialized
2024-02-26 Jo Suttonkdc: Always apply maximum ticket lifetime and renew...
2024-02-26 Jo Suttonhdb: Make maximum ticket lifetime and renew time signed...
2024-02-26 Jo Suttonkrb5: Add functions to determine whether PAC is trusted
2024-02-26 Jo Suttonkdc: Move _krb5_pac_get_attributes_info() call to right...
2024-02-26 Jo Suttonkdc-plugin: Split updating a PAC out of PAC verification
2024-02-26 Jo Suttonkdc: Call _kdc_fast_check_armor_pac() prior to calling...
2024-02-26 Jo Suttonlib/hdb: Make hdb_enctype2key() parameter const
2024-02-26 Andrew BartlettCVE-2022-37966 kdc: Implement new Kerberos session...
2024-02-26 Jo SuttonCVE-2022-37967 Add new PAC checksum
2024-02-26 Andrew BartlettCVE-2022-37966 HEIMDAL: Look up the server keys to...
2024-02-26 Jo SuttonSAMBA ONLY krb5: Don't generate PAC_ATTRIBUTES_INFO...
2024-02-26 Jo SuttonSAMBA ONLY kdc: Always include PAC if it is non-NULL
2024-02-26 Jo Suttonkdc: Allow requesting no PAC for AS-REQ to non-TGS...
2024-02-26 Jo Suttonkrb5: Remove UPN_DNS_INFO_EX realm check
2024-02-26 Jo Suttonkdc: Add function to get current KDC time
2024-02-26 Stefan Metzmacherkdc: add kdc_log() before _kdc_fast_mk_error() also...
2024-02-26 Jo Suttonkrb5: Check for signed overflow
2024-02-26 Jo Suttonkdc: Reinstate publicly accessible configuration struct...
2024-02-26 Jo Suttonkuser: Avoid conflicting macro definitions
2024-02-26 Stefan Metzmacherkrb5: Set canonicalize flag for enterprise principals
2024-02-26 Stefan Metzmacherlib/krb5: allow access to anonymous mcache entries...
2024-02-26 Andrew Bartlettlib/krb5: Fix loss of information in _gsskrb5_canon_nam...
2024-02-26 Andrew Bartlettlib/krb5: Honour KRB5_CTX_F_DNS_CANONICALIZE_HOSTNAME...
2024-02-26 Andrew Bartlettkdc: Change KDC to respect HDB server name type if...
2024-02-26 Jo Suttonkdc: Don't conceal error code when using FAST
2024-02-26 Jo Suttonkdc: Send ETYPE-INFO2 instead of PW-SALT for validated...
2024-02-26 Andrew BartlettAdapt apply_heimdal.sh to new Heimdal location in Samba
2024-02-26 Stefan Metzmacherkdc: use the correct authtime from addtitional ticket...
2024-02-26 Stefan Metzmacherkdc: if we don't have an authenticator subkey for S4U2P...
2024-02-26 Stefan Metzmacherkdc: decrypt b->enc_authorization_data in tgs_build_reply()
2024-02-26 Stefan Metzmacherkdc: fix memory leak when decryption AuthorizationData
2024-02-26 Stefan Metzmacherkdc: remember kvno numbers for longterm key pre-auth
2024-02-26 Stefan Metzmacherkdc: add KDC_AUTH_EVENT_HISTORIC_LONG_TERM_KEY support...
2024-02-26 Stefan Metzmacherkdc: add KDC_AUTH_EVENT_HISTORIC_LONG_TERM_KEY support...
2024-02-26 Stefan Metzmacherkdc: add KDC_AUTH_EVENT_HISTORIC_LONG_TERM_KEY value
2024-02-26 Stefan Metzmacherkdc: add success logging to pa_enc_chal_validate()
2024-02-26 Stefan Metzmacherkdc: split out pa_enc_chal_decrypt_kvno() from pa_enc_c...
2024-02-26 Stefan Metzmacherkdc: split out pa_enc_ts_decrypt_kvno() from pa_enc_ts_...
2024-02-26 Jo Suttonkrb5: Correct inverted conditions
2024-02-26 Jo Suttonlorikeet-heimdal: Move Heimdal into third_party directory
2024-02-26 Andrew Bartlettlorikeet-heimdal: modernize URLs in helper scripts
2024-02-26 Andrew Bartlettlorikeet-heimdal: import-lorikeet: Use --no-verify...
2024-02-26 Andrew Bartlettlorikeet-heimdal: apply_heimdal: Try harder to apply...
2024-02-26 Andrew Bartlettlorikeet-heimdal: apply_heimdal: Only show the Heimdal...
2024-02-26 Andrew Bartlettlorikeet-heimdal: Include Samba commit in cherry-picked...
2024-02-26 Andrew Bartlettlorikeet-heimdal: improve apply_heimdal.sh
2024-02-26 Andrew Bartlettlorikeet-heimdal: specify hash to heimdal import, rathe...
2024-02-26 Jelmer Vernooijlorikeet-heimdal: rebase-lorikeet: Explicitly use bash.
2024-02-26 Andrew Tridgelllorikeet-heimdal: Add a new script to help merging...
2024-02-26 Stefan Metzmacherlorikeet-heimdal: improve import-lorikeet.sh for the...
2024-02-26 Andrew Bartlettlorikeet-heimdal: Improve the heimdal import scripts
2024-02-26 Stefan Metzmacherlorikeet-heimdal: add scipts to rebase and import the...
2024-02-26 Stefan Metzmacherlorikeet-heimdal: add HEIMDAL-LICENCE.txt
2024-02-26 Stefan Metzmacherlorikeet-heimdal: camellia-ntt GPLv2+ license
2024-02-26 Stefan Metzmacherlorikeet-heimdal: autogen.sh modifications
2024-01-20 Nicolas Williamstests: Use here-doc kadmin in Java test
2024-01-17 Nicolas Williamstests: Speed up tests/gss/check-gssmask
2024-01-16 Nicolas Williamstests: Use kadmin w/ here-document to speed up tests
2024-01-16 Nicolas Williamstests: Kill daemons on ^C
2024-01-16 Nicolas Williamstests: Make check-hdb-mitdb a bit more verbose
2024-01-16 Nicolas Williamscf: Add --with-mitdb=PATH option
2024-01-16 Nicolas Williamsdoc: Clarify kdc --ports / [kdc] ports (fix #1223)
next