git.samba.org
/
metze
/
heimdal
/
wip.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
heimdal: Match windows and return KRB5KDC_ERR_CLIENT_REVOKED when the account is...
[metze/heimdal/wip.git]
/
kdc
/
kerberos5.c
2020-04-29
Andrew Bartlett
heimdal: Match windows and return KRB5KDC_ERR_CLIENT_RE...
blob
|
commitdiff
|
raw
2020-04-29
Stefan Metzmacher
kdc: use the correct kvno number for PKINIT in the...
blob
|
commitdiff
|
raw
|
diff to current
2020-04-29
Stefan Metzmacher
kdc: add krb5plugin_windc_pac_pk_generate() hook
blob
|
commitdiff
|
raw
|
diff to current
2020-04-29
Gary Lockyer
Align locked out account behaviour with Windows
blob
|
commitdiff
|
raw
|
diff to current
2019-12-11
Nicolas Williams
kdc: Fix audit_addkv() typos and reason handling
blob
|
commitdiff
|
raw
|
diff to current
2019-12-05
Nicolas Williams
Fix tests/can and tests/kdc
blob
|
commitdiff
|
raw
|
diff to current
2019-12-05
Roland C. Dowdeswell
Reduce older log messages to level 4 and collect some...
blob
|
commitdiff
|
raw
|
diff to current
2019-12-05
Roland C. Dowdeswell
Generate a single summary audit line for AS/TGS.
blob
|
commitdiff
|
raw
|
diff to current
2019-10-21
Roland C. Dowdeswell
Define log levels in docs and change default to 0-3.
blob
|
commitdiff
|
raw
|
diff to current
2019-09-04
Viktor Dukhovni
Optional backwards-compatible anon-pkinit behaviour
blob
|
commitdiff
|
raw
|
diff to current
2019-07-09
Nicolas Williams
Declare kdc log functions to be printf-like
blob
|
commitdiff
|
raw
|
diff to current
2019-06-21
Roland C. Dowdeswell
kdc: no error if req is fwdable on non-fwdable princ
blob
|
commitdiff
|
raw
|
diff to current
2019-06-03
Jeffrey Altman
kdc: history of request_anonymous vs cname-in-addl...
blob
|
commitdiff
|
raw
|
diff to current
2019-06-03
Luke Howard
kdc: don't misidentify constrained delegation requests...
blob
|
commitdiff
|
raw
|
diff to current
2019-06-03
Luke Howard
kdc: refactor anonymous checks in KDC
blob
|
commitdiff
|
raw
|
diff to current
2019-06-02
Luke Howard
krb5: rename constrained-delegatiom to cname-in-addl-tkt
blob
|
commitdiff
|
raw
|
diff to current
2019-05-19
Luke Howard
kdc: use actual client princ for KRB5SignedPath
blob
|
commitdiff
|
raw
|
diff to current
2019-05-16
Jeffrey Altman
krb5_principal_is_anonymous
blob
|
commitdiff
|
raw
|
diff to current
2019-05-14
Luke Howard
krb5: _krb5_principal_is_anonymous() helper API
blob
|
commitdiff
|
raw
|
diff to current
2019-05-14
Luke Howard
kdc: support for anonymous TGS-REQs
blob
|
commitdiff
|
raw
|
diff to current
2019-05-14
Luke Howard
kdc: allow anonymous AS requests with long-term keys
blob
|
commitdiff
|
raw
|
diff to current
2019-05-14
Luke Howard
kdc: conform _kdc_make_anonymous_principalname() to...
blob
|
commitdiff
|
raw
|
diff to current
2019-05-14
Luke Howard
kdc: do not include PAC for anonymous AS requests
blob
|
commitdiff
|
raw
|
diff to current
2019-05-14
Luke Howard
kdc: fix compliance with RFC 8062 Section 4.1
blob
|
commitdiff
|
raw
|
diff to current
2019-01-07
Luke Howard
kdc: omit default salt from PA-ETYPE-INFO[2]
blob
|
commitdiff
|
raw
|
diff to current
2019-01-07
Jeffrey Altman
kdc: get_pa_etype_info_both comply with RFC4120
blob
|
commitdiff
|
raw
|
diff to current
2019-01-06
Luke Howard
kdc: only set HDB_F_GET_KRBTGT when requesting TGS...
blob
|
commitdiff
|
raw
|
diff to current
2019-01-06
Luke Howard
Revert "kdc: move more name canonicalization logic...
blob
|
commitdiff
|
raw
|
diff to current
2019-01-05
Luke Howard
kdc: move more name canonicalization logic to KDC
blob
|
commitdiff
|
raw
|
diff to current
2019-01-05
Luke Howard
kdc: perform AS-REQ canonicalization in kdc
blob
|
commitdiff
|
raw
|
diff to current
2018-12-26
Isaac Boukris
KDC: Add ETYPE_INFO{,2} padata on PREAUTH_FAILED
blob
|
commitdiff
|
raw
|
diff to current
2018-12-14
Olly Betts
Fix assorted typos
blob
|
commitdiff
|
raw
|
diff to current
2017-12-05
Viktor Dukhovni
Security: Avoid NULL structure pointer member dereference
blob
|
commitdiff
|
raw
|
diff to current
2017-04-29
Jeffrey Altman
check return copy_Realm, copy_PrincipalName, copy_Encry...
blob
|
commitdiff
|
raw
|
diff to current
2016-11-19
Jeffrey Altman
krb5: _kdc_encode_reply leaks 'buf' if early exit
blob
|
commitdiff
|
raw
|
diff to current
2016-11-15
Jeffrey Altman
kdc: principals of type NT-UNKNOWN can be anonymous
blob
|
commitdiff
|
raw
|
diff to current
2016-10-08
Luke Howard
krb5: implement draft-ietf-kitten-aes-cts-hmac-sha2-07
blob
|
commitdiff
|
raw
|
diff to current
2016-05-14
Andrew Bartlett
Merge pull request #154 from metze-samba/heimdal-for...
blob
|
commitdiff
|
raw
|
diff to current
2016-02-26
Nicolas Williams
Fix warnings (clang 3.6)
blob
|
commitdiff
|
raw
|
diff to current
2015-08-03
Love Hörnquist Åstrand
Merge pull request #134 from abartlet/allow-null-authen...
blob
|
commitdiff
|
raw
|
diff to current
2015-07-31
Andrew Bartlett
Merge pull request #138 from abartlet/lorikeet-heimdal...
blob
|
commitdiff
|
raw
|
diff to current
2015-07-31
Stefan Metzmacher
kdc: add support for HDB_ERR_WRONG_REALM
blob
|
commitdiff
|
raw
|
diff to current
2015-07-31
Stefan Metzmacher
kdc: base _kdc_fast_mk_error() on krb5_mk_error_ext()
blob
|
commitdiff
|
raw
|
diff to current
2015-06-17
Stefan Metzmacher
kdc: remove KRB5_PADATA_CLIENT_CANONICALIZED handling
blob
|
commitdiff
|
raw
|
diff to current
2015-06-17
Andrew Bartlett
kdc: Preserve error code from Pre Authentication .valid...
blob
|
commitdiff
|
raw
|
diff to current
2015-04-28
Love Hörnquist Åstrand
call hdb_auth_status when password is wrong in the...
blob
|
commitdiff
|
raw
|
diff to current
2014-08-24
Love Hörnquist Åstrand
Merge pull request #87 from jelmer/travis
blob
|
commitdiff
|
raw
|
diff to current
2014-08-23
Love Hörnquist Åstrand
Merge pull request #109 from cg2v/dist-kadmin-version...
blob
|
commitdiff
|
raw
|
diff to current
2014-08-23
Love Hörnquist Åstrand
Merge pull request #110 from cg2v/anonymous-pkinit
blob
|
commitdiff
|
raw
|
diff to current
2014-07-07
Chaskiel Grundman
Use anon realm for anonymous PKINIT
blob
|
commitdiff
|
raw
|
diff to current
2014-07-06
Chaskiel Grundman
Document logic in _krb5_is_anon_request
blob
|
commitdiff
|
raw
|
diff to current
2014-07-03
Chaskiel Grundman
Include empty PKINIT-KX padata
blob
|
commitdiff
|
raw
|
diff to current
2014-07-03
Chaskiel Grundman
Recognize anonymous AS requests using bit 14
blob
|
commitdiff
|
raw
|
diff to current
2013-07-30
Jeffrey Altman
_kdc_find_etype: prefer default salt for preauth
blob
|
commitdiff
|
raw
|
diff to current
2013-07-29
Jeffrey Altman
_kdc_find_etype: do not return success if ret_key ...
blob
|
commitdiff
|
raw
|
diff to current
2013-07-28
Jeffrey Altman
_kdc_find_etype: fix typo
blob
|
commitdiff
|
raw
|
diff to current
2013-07-28
Jeffrey Altman
_kdc_find_etype consolidation
blob
|
commitdiff
|
raw
|
diff to current
2013-07-27
Nicolas Williams
When asking for the strongest key, get it right
blob
|
commitdiff
|
raw
|
diff to current
2013-07-27
Nicolas Williams
Check all three DES types
blob
|
commitdiff
|
raw
|
diff to current
2013-07-27
Nicolas Williams
Fix bug with use strongest session key feature
blob
|
commitdiff
|
raw
|
diff to current
2013-07-18
Love Hornquist Astrand
spelling
blob
|
commitdiff
|
raw
|
diff to current
2013-07-18
Love Hornquist Astrand
We always say we support FAST/enc-pa-rep
blob
|
commitdiff
|
raw
|
diff to current
2013-07-11
Love Hornquist Astrand
allow the non preauth case again
blob
|
commitdiff
|
raw
|
diff to current
2012-03-06
Roland C. Dowdeswell
Add require-pwchange flag to HDB and honour it if prese...
blob
|
commitdiff
|
raw
|
diff to current
2012-02-27
Roland C. Dowdeswell
Add require-pwchange flag to HDB and honour it if prese...
blob
|
commitdiff
|
raw
|
diff to current
2012-02-21
Roland C. Dowdeswell
Add -Wshadow and deal with the warnings.
blob
|
commitdiff
|
raw
|
diff to current
2011-11-25
Nicolas Williams
Rename and fix as/tgs-use-strongest-key config parameters
blob
|
commitdiff
|
raw
|
diff to current
2011-11-16
Nicolas Williams
Initial patch for dealing with AD x-realm key rollover
blob
|
commitdiff
|
raw
|
diff to current
2011-11-03
Nicolas Williams
Fixes to make Heimdal -Wall -Werror clean
blob
|
commitdiff
|
raw
|
diff to current
2011-10-29
Love Hörnquist Åstrand
merge support for FAST in as-req codepath
blob
|
commitdiff
|
raw
|
diff to current
2011-07-30
Stefan Metzmacher
kdc: pass down HDB_F_FOR_AS_REQ and HDB_F_FOR_TGS_REQ...
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hörnquist Åstrand
spelling
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hörnquist Åstrand
spelling
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hörnquist Åstrand
encode fast state in the fast cookie
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hörnquist Åstrand
make compile after rebase
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hörnquist Åstrand
free fast cookie
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
should use hide_client_names
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
different logging
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
Check if message too large
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
use et, ek from r->
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
Break out PAC generation
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
dont pass req buffer to _kdc_encode_reply
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
check return length
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
use kdc_request_t for add_enc_pa_req
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
break out KRB5_PADATA_REQ_ENC_PA_REP
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
switch to _kdc_r_log
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
move PKINIT to a preauth mech too
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
Add and use _kdc_set_e_text()
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
Create a request structure
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
Hide client name of privacy reasons
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
make AS work with FAST
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
free ac after its used
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
break out mk_error
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
Preserve outer error
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
fix up to update kdc_db_fetch
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
memory management
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
send enc challange in KDC reply
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
partial handling of ENC-CHALLANGE
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
comment why we add cookie
blob
|
commitdiff
|
raw
|
diff to current
2011-07-25
Love Hornquist Astrand
send cookie on error and send right error message
blob
|
commitdiff
|
raw
|
diff to current
next