heimdal: Match windows and return KRB5KDC_ERR_CLIENT_REVOKED when the account is...
[metze/heimdal/wip.git] / kdc / kerberos5.c
2020-04-29 Andrew Bartlettheimdal: Match windows and return KRB5KDC_ERR_CLIENT_RE...
2020-04-29 Stefan Metzmacherkdc: use the correct kvno number for PKINIT in the...
2020-04-29 Stefan Metzmacherkdc: add krb5plugin_windc_pac_pk_generate() hook
2020-04-29 Gary LockyerAlign locked out account behaviour with Windows
2019-12-11 Nicolas Williamskdc: Fix audit_addkv() typos and reason handling
2019-12-05 Nicolas WilliamsFix tests/can and tests/kdc
2019-12-05 Roland C. DowdeswellReduce older log messages to level 4 and collect some...
2019-12-05 Roland C. DowdeswellGenerate a single summary audit line for AS/TGS.
2019-10-21 Roland C. DowdeswellDefine log levels in docs and change default to 0-3.
2019-09-04 Viktor DukhovniOptional backwards-compatible anon-pkinit behaviour
2019-07-09 Nicolas WilliamsDeclare kdc log functions to be printf-like
2019-06-21 Roland C. Dowdeswellkdc: no error if req is fwdable on non-fwdable princ
2019-06-03 Jeffrey Altmankdc: history of request_anonymous vs cname-in-addl...
2019-06-03 Luke Howardkdc: don't misidentify constrained delegation requests...
2019-06-03 Luke Howardkdc: refactor anonymous checks in KDC
2019-06-02 Luke Howardkrb5: rename constrained-delegatiom to cname-in-addl-tkt
2019-05-19 Luke Howardkdc: use actual client princ for KRB5SignedPath
2019-05-16 Jeffrey Altmankrb5_principal_is_anonymous
2019-05-14 Luke Howardkrb5: _krb5_principal_is_anonymous() helper API
2019-05-14 Luke Howardkdc: support for anonymous TGS-REQs
2019-05-14 Luke Howardkdc: allow anonymous AS requests with long-term keys
2019-05-14 Luke Howardkdc: conform _kdc_make_anonymous_principalname() to...
2019-05-14 Luke Howardkdc: do not include PAC for anonymous AS requests
2019-05-14 Luke Howardkdc: fix compliance with RFC 8062 Section 4.1
2019-01-07 Luke Howardkdc: omit default salt from PA-ETYPE-INFO[2]
2019-01-07 Jeffrey Altmankdc: get_pa_etype_info_both comply with RFC4120
2019-01-06 Luke Howardkdc: only set HDB_F_GET_KRBTGT when requesting TGS...
2019-01-06 Luke HowardRevert "kdc: move more name canonicalization logic...
2019-01-05 Luke Howardkdc: move more name canonicalization logic to KDC
2019-01-05 Luke Howardkdc: perform AS-REQ canonicalization in kdc
2018-12-26 Isaac BoukrisKDC: Add ETYPE_INFO{,2} padata on PREAUTH_FAILED
2018-12-14 Olly BettsFix assorted typos
2017-12-05 Viktor DukhovniSecurity: Avoid NULL structure pointer member dereference
2017-04-29 Jeffrey Altmancheck return copy_Realm, copy_PrincipalName, copy_Encry...
2016-11-19 Jeffrey Altmankrb5: _kdc_encode_reply leaks 'buf' if early exit
2016-11-15 Jeffrey Altmankdc: principals of type NT-UNKNOWN can be anonymous
2016-10-08 Luke Howardkrb5: implement draft-ietf-kitten-aes-cts-hmac-sha2-07
2016-05-14 Andrew BartlettMerge pull request #154 from metze-samba/heimdal-for...
2016-02-26 Nicolas WilliamsFix warnings (clang 3.6)
2015-08-03 Love Hörnquist ÅstrandMerge pull request #134 from abartlet/allow-null-authen...
2015-07-31 Andrew BartlettMerge pull request #138 from abartlet/lorikeet-heimdal...
2015-07-31 Stefan Metzmacherkdc: add support for HDB_ERR_WRONG_REALM
2015-07-31 Stefan Metzmacherkdc: base _kdc_fast_mk_error() on krb5_mk_error_ext()
2015-06-17 Stefan Metzmacherkdc: remove KRB5_PADATA_CLIENT_CANONICALIZED handling
2015-06-17 Andrew Bartlettkdc: Preserve error code from Pre Authentication .valid...
2015-04-28 Love Hörnquist Åstrandcall hdb_auth_status when password is wrong in the...
2014-08-24 Love Hörnquist ÅstrandMerge pull request #87 from jelmer/travis
2014-08-23 Love Hörnquist ÅstrandMerge pull request #109 from cg2v/dist-kadmin-version...
2014-08-23 Love Hörnquist ÅstrandMerge pull request #110 from cg2v/anonymous-pkinit
2014-07-07 Chaskiel GrundmanUse anon realm for anonymous PKINIT
2014-07-06 Chaskiel GrundmanDocument logic in _krb5_is_anon_request
2014-07-03 Chaskiel GrundmanInclude empty PKINIT-KX padata
2014-07-03 Chaskiel GrundmanRecognize anonymous AS requests using bit 14
2013-07-30 Jeffrey Altman_kdc_find_etype: prefer default salt for preauth
2013-07-29 Jeffrey Altman_kdc_find_etype: do not return success if ret_key ...
2013-07-28 Jeffrey Altman_kdc_find_etype: fix typo
2013-07-28 Jeffrey Altman_kdc_find_etype consolidation
2013-07-27 Nicolas WilliamsWhen asking for the strongest key, get it right
2013-07-27 Nicolas WilliamsCheck all three DES types
2013-07-27 Nicolas WilliamsFix bug with use strongest session key feature
2013-07-18 Love Hornquist Astrandspelling
2013-07-18 Love Hornquist AstrandWe always say we support FAST/enc-pa-rep
2013-07-11 Love Hornquist Astrandallow the non preauth case again
2012-03-06 Roland C. DowdeswellAdd require-pwchange flag to HDB and honour it if prese...
2012-02-27 Roland C. DowdeswellAdd require-pwchange flag to HDB and honour it if prese...
2012-02-21 Roland C. DowdeswellAdd -Wshadow and deal with the warnings.
2011-11-25 Nicolas WilliamsRename and fix as/tgs-use-strongest-key config parameters
2011-11-16 Nicolas WilliamsInitial patch for dealing with AD x-realm key rollover
2011-11-03 Nicolas WilliamsFixes to make Heimdal -Wall -Werror clean
2011-10-29 Love Hörnquist Åstrandmerge support for FAST in as-req codepath
2011-07-30 Stefan Metzmacherkdc: pass down HDB_F_FOR_AS_REQ and HDB_F_FOR_TGS_REQ...
2011-07-25 Love Hörnquist Åstrandspelling
2011-07-25 Love Hörnquist Åstrandspelling
2011-07-25 Love Hörnquist Åstrandencode fast state in the fast cookie
2011-07-25 Love Hörnquist Åstrandmake compile after rebase
2011-07-25 Love Hörnquist Åstrandfree fast cookie
2011-07-25 Love Hornquist Astrandshould use hide_client_names
2011-07-25 Love Hornquist Astranddifferent logging
2011-07-25 Love Hornquist AstrandCheck if message too large
2011-07-25 Love Hornquist Astranduse et, ek from r->
2011-07-25 Love Hornquist AstrandBreak out PAC generation
2011-07-25 Love Hornquist Astranddont pass req buffer to _kdc_encode_reply
2011-07-25 Love Hornquist Astrandcheck return length
2011-07-25 Love Hornquist Astranduse kdc_request_t for add_enc_pa_req
2011-07-25 Love Hornquist Astrandbreak out KRB5_PADATA_REQ_ENC_PA_REP
2011-07-25 Love Hornquist Astrandswitch to _kdc_r_log
2011-07-25 Love Hornquist Astrandmove PKINIT to a preauth mech too
2011-07-25 Love Hornquist AstrandAdd and use _kdc_set_e_text()
2011-07-25 Love Hornquist AstrandCreate a request structure
2011-07-25 Love Hornquist AstrandHide client name of privacy reasons
2011-07-25 Love Hornquist Astrandmake AS work with FAST
2011-07-25 Love Hornquist Astrandfree ac after its used
2011-07-25 Love Hornquist Astrandbreak out mk_error
2011-07-25 Love Hornquist AstrandPreserve outer error
2011-07-25 Love Hornquist Astrandfix up to update kdc_db_fetch
2011-07-25 Love Hornquist Astrandmemory management
2011-07-25 Love Hornquist Astrandsend enc challange in KDC reply
2011-07-25 Love Hornquist Astrandpartial handling of ENC-CHALLANGE
2011-07-25 Love Hornquist Astrandcomment why we add cookie
2011-07-25 Love Hornquist Astrandsend cookie on error and send right error message
next