75c8250abf
Tell if we manged to verify the PAC or not
2010-06-11 09:53:47 -07:00
bf9ee30c44
Rephrase the PKINIT setup instructions
...
Rephrase and reword the PKINIT setup documentation to be in somewhat
more idiomatic English. There should be no changes to the substance
of the documentation.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-06-11 09:49:58 -07:00
cd1f1dd75e
Rewrite the transit policy section
...
Expand the transit policy section considerably, with additional
examples and explanation of the examples. Separate allowing
cross-realm transits from configuring clients to do cross-realm
transits. Add a separate example section for an Active Directory
forest.
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-06-11 09:25:57 -07:00
dfd107c709
Test principal name with aliases in them
2010-06-09 22:21:12 -07:00
37762d631c
Don't use invalid base64 encoded string, just use plain password instead
2010-06-04 14:40:31 -07:00
91020dd11d
add cfb8-aes modes
2010-06-03 17:20:40 -07:00
efa5a314a8
fix warnings
2010-06-03 16:16:48 -07:00
abd5fdab5a
Patch from Eray Asian to avoid PK-INIT when its not supported
2010-06-03 14:16:48 -07:00
f73a7b94d0
test kadmind get -o
2010-06-03 11:44:14 -07:00
faa1528394
make http transport work again
2010-06-02 08:32:03 -07:00
93d3d14827
test HTTP transport
2010-06-02 08:30:29 -07:00
45158c861e
document allow_weak_crypto
2010-06-02 08:14:47 -07:00
a11303a4ca
make tfm default
2010-06-01 20:24:52 -07:00
3f56365be0
don't reinit variable
2010-06-01 19:18:24 -07:00
2527594a5c
If build with libcrypto, load the openssl engine
2010-06-01 17:17:21 -07:00
de4cee4dd7
speed for rsa
2010-06-01 17:16:25 -07:00
4f90bb51d2
add gmp
2010-06-01 17:11:29 -07:00
f41c361718
make almost work
2010-06-01 17:10:57 -07:00
3c8d9ef8d5
more symbols
2010-06-01 15:07:43 -07:00
40327e0cf3
add more generate
2010-06-01 15:07:17 -07:00
661ce3d1a4
add more generate
2010-06-01 15:07:07 -07:00
8bb2de2e3f
test --time-key=generate
2010-06-01 15:06:53 -07:00
3d4eabb5ea
more testing
2010-06-01 15:05:07 -07:00
86da42df1d
abstract out --no-afslog and --no-unlog
2010-06-01 14:42:16 -07:00
d94ba7a5de
its just expand_path.c now
2010-06-01 11:17:46 -07:00
36bfbfc1d8
add fp_init_multi and fp_find_prime
2010-06-01 11:16:20 -07:00
5377497d47
add dh-tfm.obj
2010-06-01 11:02:56 -07:00
dc1baf6ab4
only support DS record conversion if DNS_TYPE_DS is defined
2010-06-01 10:54:47 -07:00
10ad3df8f5
use size_t for lengths
2010-06-01 10:46:57 -07:00
086885744c
Fix argument order of strlcpy
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-06-01 10:25:01 -07:00
ccacfda1cc
dont pass --no-unlog if afs is not configured. Patch partly from Eray Asian
2010-06-01 10:17:37 -07:00
29cf9c937e
Add $(INCLUDE_hcrypto), from harald barth
2010-06-01 09:56:33 -07:00
df45fec393
plug memory leak
2010-05-30 15:39:12 -07:00
33b8ccccd6
catch error from as.*printf
2010-05-30 15:13:44 -07:00
e65154c6db
catch error from as.*printf
2010-05-30 14:48:48 -07:00
f337b458f3
catch error from as.*printf
2010-05-30 14:16:35 -07:00
0b2b9d9834
catch error from as.*printf
2010-05-30 14:12:39 -07:00
2b1645aa08
catch error from as.*printf
2010-05-30 13:44:41 -07:00
077357c848
catch error from as.*printf
2010-05-30 13:37:07 -07:00
788189805c
catch error from as.*printf
2010-05-30 13:28:49 -07:00
351e0d0914
catch error from as.*printf
2010-05-30 13:28:09 -07:00
9773655027
catch error from as.*printf
2010-05-30 12:41:06 -07:00
f4f59121c3
allow password reuse for a short time after it was set last time
...
Patch from Harald Barth
2010-05-28 13:40:37 -07:00
f2c29f2b1e
use ret 0
2010-05-27 12:43:09 -05:00
44fd145d05
always use _krb5_expand_path_tokens
2010-05-27 12:31:23 -05:00
886914f8f9
always use _krb5_expand_path_tokens
2010-05-27 12:25:47 -05:00
f9481967c7
clean up
2010-05-27 12:20:36 -05:00
869b099f00
remove _w32
2010-05-27 11:56:03 -05:00
88c5f75b16
remove _w32 and support unix enviroments too
2010-05-27 11:55:20 -05:00
58022d0721
use _krb5_expand_path_tokens
2010-05-27 11:54:39 -05:00
Love Hornquist Astrand