6 Commits

Author	SHA1	Message	Date
Nicolas Williams	855b27ccfb	httpkadmind: Allow host SPNs to fetch selves ... Combined with the synthetic_clients feature, this will allow hosts that have a PKINIT-worthy client certificate with a SAN with their host principals to create their own principals and "extract" their host keytabs. Together with some other PKIX credential bootstrapping protocol, this can help hosts bootstrap Kerberos host credentials.	2021-06-29 14:52:07 -05:00
Nicolas Williams	b1b993b231	httpkadmind: Use no-store rather than no-cache	2021-04-30 15:46:20 -05:00
Nicolas Williams	3f7868b969	httpkadmind: Fix error clobbering	2020-09-29 16:25:12 -05:00
Nicolas Williams	c12ca129b6	httpkadmind: Fix FD leak ... Using `mkstemp()` is nice, but if you don't need the FD, then don't forget to close it!	2020-09-15 15:24:29 -05:00
Nicolas Williams	4a4ceaf287	httpkadmind: Fix NULL deref on ENOMEM	2020-09-15 11:31:29 -05:00
Nicolas Williams	9574783d04	kdc: Add httpkadmind ... TBD: - improve error handling, logging, tracing! - move all REST services out of kdc/	2020-09-08 14:34:08 -05:00