git.samba.org
/
metze
/
heimdal
/
wip.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
lorikeet-heimdal: add scipts to rebase and import the latest version into samba4
[metze/heimdal/wip.git]
/
kdc
/
2020-04-24
Nicolas Williams
Move KDC audit functionality to lib/base/
tree
|
commitdiff
2020-03-08
Jeffrey Altman
kdc: kx509.c fix build failures
tree
|
commitdiff
2020-03-06
Daria Phoebe Brashear
kdc/kx509.c: clean up krb5_get_error_message strings...
tree
|
commitdiff
2020-03-06
Daria Phoebe Brashear
kdc kx509: avoid double free of cprinc and s in check_authz
tree
|
commitdiff
2020-03-02
Nicolas Williams
Move some infra bits of lib/krb5/ to lib/base/ (2)
tree
|
commitdiff
2020-02-11
Isaac Boukris
tgs-req: strip forwardable and proxiable if the server...
tree
|
commitdiff
2020-01-10
Nicolas Williams
bx509: Add /, /health for load balancer checking
tree
|
commitdiff
2020-01-10
Nicolas Williams
bx509: Do not clobber library error info
tree
|
commitdiff
2020-01-10
Nicolas Williams
kdc: add test_token_validator -a option
tree
|
commitdiff
2020-01-10
Nicolas Williams
kdc: implement test_kdc_ca -a option
tree
|
commitdiff
2020-01-10
Nicolas Williams
bx509: Fix CSR authorizer IPC plugin bug
tree
|
commitdiff
2020-01-03
Nicolas Williams
Add bx509d.8 man page
tree
|
commitdiff
2020-01-01
Luke Howard
kdc: link test_token_validator against libgssapi
tree
|
commitdiff
2019-12-20
Nicolas Williams
kdc: Fix build race
tree
|
commitdiff
2019-12-20
Nicolas Williams
bx509: Fix cjwt_token_validator build
tree
|
commitdiff
2019-12-20
Nicolas Williams
bx509: Work around microhttpd bug
tree
|
commitdiff
2019-12-12
Nicolas Williams
kdc: Modernize kx509 logging too
tree
|
commitdiff
2019-12-11
Nicolas Williams
kdc: Fix audit_addkv() typos and reason handling
tree
|
commitdiff
2019-12-11
Nicolas Williams
bx509: Add proper logging
tree
|
commitdiff
2019-12-10
Nicolas Williams
kdc: Add missing exports
tree
|
commitdiff
2019-12-10
Isaac Boukris
CVE-2019-14870: Validate client attributes in protocol...
tree
|
commitdiff
2019-12-10
Isaac Boukris
CVE-2019-14870: Apply forwardable policy in protocol...
tree
|
commitdiff
2019-12-10
Isaac Boukris
CVE-2019-14870: Always lookup impersonate client in DB
tree
|
commitdiff
2019-12-10
Nicolas Williams
kdc: Fix leaks
tree
|
commitdiff
2019-12-10
Nicolas Williams
bx509: CSRF protection for /bnegotiate
tree
|
commitdiff
2019-12-10
Nicolas Williams
kdc: bx509: Do not vend issuer private keys
tree
|
commitdiff
2019-12-05
Nicolas Williams
Fix tests/can and tests/kdc
tree
|
commitdiff
2019-12-05
Nicolas Williams
Fix Travis build moar
tree
|
commitdiff
2019-12-05
Nicolas Williams
kdc: Fix JWK key rotation danger
tree
|
commitdiff
2019-12-05
Nicolas Williams
kdc: Fix warnings: fix _kdc_audit_addkv() usage
tree
|
commitdiff
2019-12-05
Nicolas Williams
Fix Travis build
tree
|
commitdiff
2019-12-05
Roland C. Dowdeswell
kdc/fast.c: fix leak in unusual error path.
tree
|
commitdiff
2019-12-05
Roland C. Dowdeswell
kdc/process.c: add tracing messages.
tree
|
commitdiff
2019-12-05
Roland C. Dowdeswell
Reduce older log messages to level 4 and collect some...
tree
|
commitdiff
2019-12-05
Roland C. Dowdeswell
Generate a single summary audit line for AS/TGS.
tree
|
commitdiff
2019-12-05
Nicolas Williams
Add bx509d
tree
|
commitdiff
2019-11-08
Roland C. Dowdeswell
derived keys: ensure that princ is correct
tree
|
commitdiff
2019-10-21
Roland C. Dowdeswell
Define log levels in docs and change default to 0-3.
tree
|
commitdiff
2019-10-18
Roland C. Dowdeswell
Implement [kdc] derived_keys_maxdots
tree
|
commitdiff
2019-10-10
Nicolas Williams
kx509: Add CSR support
tree
|
commitdiff
2019-10-09
Nicolas Williams
Add kx509 client and revamp kx509 service
tree
|
commitdiff
2019-10-03
Nicolas Williams
kdc: improve HTTP parsing
tree
|
commitdiff
2019-10-03
Nicolas Williams
kdc: fix leaks
tree
|
commitdiff
2019-10-03
Nicolas Williams
kdc: fix invalid free at exit time
tree
|
commitdiff
2019-10-03
Nicolas Williams
roken_detach_prep() should return fd
tree
|
commitdiff
2019-09-18
Roland C. Dowdeswell
We provide a "derived key" mechanism to allow wildcard...
tree
|
commitdiff
2019-09-04
Viktor Dukhovni
Optional backwards-compatible anon-pkinit behaviour
tree
|
commitdiff
2019-07-09
Nicolas Williams
Declare kdc log functions to be printf-like
tree
|
commitdiff
2019-07-09
Nicolas Williams
Remove references to Kerberos v4 from kdc/kdc.8
tree
|
commitdiff
2019-06-21
Roland C. Dowdeswell
kdc: no error if req is fwdable on non-fwdable princ
tree
|
commitdiff
2019-06-03
Jeffrey Altman
kdc: history of request_anonymous vs cname-in-addl...
tree
|
commitdiff
2019-06-03
Luke Howard
kdc: don't misidentify constrained delegation requests...
tree
|
commitdiff
2019-06-03
Luke Howard
kdc: refactor anonymous checks in KDC
tree
|
commitdiff
2019-06-03
Luke Howard
kdc: check for cname-in-addl-tkt flag in constrained...
tree
|
commitdiff
2019-06-02
Luke Howard
krb5: rename constrained-delegatiom to cname-in-addl-tkt
tree
|
commitdiff
2019-05-31
Quanah Gibson-Mount
Fixes #550 - Note that encrypt is the default option
tree
|
commitdiff
2019-05-19
Luke Howard
kdc: use actual client princ for KRB5SignedPath
tree
|
commitdiff
2019-05-19
Isaac Boukris
kdc: allow checksum of PA-FOR-USER to be HMAC_MD5
tree
|
commitdiff
2019-05-16
Jeffrey Altman
krb5_principal_is_anonymous
tree
|
commitdiff
2019-05-14
Isaac Boukris
CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with...
tree
|
commitdiff
2019-05-14
Luke Howard
krb5: _krb5_principal_is_anonymous() helper API
tree
|
commitdiff
2019-05-14
Luke Howard
kdc: support for anonymous TGS-REQs
tree
|
commitdiff
2019-05-14
Luke Howard
kdc: allow anonymous AS requests with long-term keys
tree
|
commitdiff
2019-05-14
Luke Howard
kdc: conform _kdc_make_anonymous_principalname() to...
tree
|
commitdiff
2019-05-14
Luke Howard
kdc: do not include PAC for anonymous AS requests
tree
|
commitdiff
2019-05-14
Luke Howard
kdc: fix compliance with RFC 8062 Section 4.1
tree
|
commitdiff
2019-01-14
Jeffrey Altman
WIN32: fix calling conventions for 32-bit builds
tree
|
commitdiff
2019-01-07
Luke Howard
kdc: omit default salt from PA-ETYPE-INFO[2]
tree
|
commitdiff
2019-01-07
Jeffrey Altman
kdc: get_pa_etype_info_both comply with RFC4120
tree
|
commitdiff
2019-01-06
Luke Howard
kdc: only set HDB_F_GET_KRBTGT when requesting TGS...
tree
|
commitdiff
2019-01-06
Luke Howard
Revert "kdc: move more name canonicalization logic...
tree
|
commitdiff
2019-01-05
Luke Howard
kdc: move more name canonicalization logic to KDC
tree
|
commitdiff
2019-01-05
Luke Howard
kdc: perform AS-REQ canonicalization in kdc
tree
|
commitdiff
2019-01-05
Luke Howard
hdb: dereference principal aliases in all KDC lookups...
tree
|
commitdiff
2019-01-05
Luke Howard
Revert "KDC: Allow hdb to set the issued ticket's realm"
tree
|
commitdiff
2019-01-04
Luke Howard
kdc: export kdc_get_instance() for windc plugins
tree
|
commitdiff
2019-01-04
Luke Howard
krb5, kadm5: refactor plugin API
tree
|
commitdiff
2018-12-30
Luke Howard
libhcrypto: UI_UTIL_FLAG_VERIFY_SILENT
tree
|
commitdiff
2018-12-29
Luke Howard
kdc: log principal name in TGT not found error
tree
|
commitdiff
2018-12-26
Isaac Boukris
KDC: Add ETYPE_INFO{,2} padata on PREAUTH_FAILED
tree
|
commitdiff
2018-12-26
Isaac Boukris
KDC: Allow hdb to set the issued ticket's realm
tree
|
commitdiff
2018-12-14
Isaac Boukris
krb5tgs: use string representation in logs
tree
|
commitdiff
2018-12-14
Isaac Boukris
Correct S4U2Self spelling in a comment
tree
|
commitdiff
2018-12-14
Olly Betts
Fix assorted typos
tree
|
commitdiff
2018-05-13
Luke Howard
KCM: restore support for Solaris doors IPC mechanism...
tree
|
commitdiff
2017-12-06
Viktor Dukhovni
Hide principal names in errors with FAST
tree
|
commitdiff
2017-12-05
Viktor Dukhovni
Security: Avoid NULL structure pointer member dereference
tree
|
commitdiff
2017-10-30
Viktor Dukhovni
Further improve kdc child process management
tree
|
commitdiff
2017-10-11
Viktor Dukhovni
Handle long lines in dump files
tree
|
commitdiff
2017-09-25
Quanah Gibson-Mount
Fixes https://github.com/heimdal/heimdal/issues/310...
tree
|
commitdiff
2017-09-25
Stefan Metzmacher
kdc: fix dh->q allocation check in get_dh_param()
tree
|
commitdiff
2017-07-28
Jeffrey Altman
kdc: unused pid element is (pid_t)-1 not zero
tree
|
commitdiff
2017-07-12
Viktor Dukhovni
Retain `ret != 0` when capaths finds no match.
tree
|
commitdiff
2017-04-29
Jeffrey Altman
check return copy_Realm, copy_PrincipalName, copy_Encry...
tree
|
commitdiff
2017-04-29
Jeffrey Altman
include field separators in comparison
tree
|
commitdiff
2017-04-13
Viktor Dukhovni
Fix transit path validation CVE-2017-6594
tree
|
commitdiff
2017-03-13
Jeffrey Altman
kdc: de_http stricter parsing
tree
|
commitdiff
2017-01-27
Jeffrey Altman
kdc: fix kx509 service principal match
tree
|
commitdiff
2017-01-13
Jeffrey Altman
kdc: _kdc_do_kx509 fix use after free error
tree
|
commitdiff
2016-12-20
Viktor Dukhovni
Avoid interposing pidfile(), use rk_pidfile() instead
tree
|
commitdiff
next