Viktor Dukhovni
8ec4f23701
Hide principal names in errors with FAST
2017-12-05 19:01:04 -05:00
Jeffrey Altman
cdf5d324e3
kdc: _kdc_fast_unwrap_request leaks 'buf'
...
Change-Id: If4d3852112dadc331db1d3601b2c7bd6b3129429
2016-11-18 23:59:47 -05:00
Stefan Metzmacher
a873e21d7c
kdc: base _kdc_fast_mk_error() on krb5_mk_error_ext()
...
Signed-off-by: Stefan Metzmacher <metze@samba.org >
2015-07-31 17:30:23 +12:00
Nicolas Williams
c9609cdb37
Initial patch for dealing with AD x-realm key rollover
...
AD issues x-realm TGTs with kvno 0. On key x-realm trust key change
we need to be able to try current and previous keys for trust, else
we will have some failures.
2011-11-15 21:53:33 -06:00
Love Hörnquist Åstrand
0941d6dbce
add constant for WELLKNOWN:ORG.H5L realm
2011-07-24 21:29:27 -07:00
Love Hörnquist Åstrand
fb5e32e0f6
goto out
2011-07-24 21:23:53 -07:00
Love Hörnquist Åstrand
f0371bb2ee
fast cookie expiration
2011-07-24 21:21:39 -07:00
Love Hörnquist Åstrand
46f285bcc9
encode fast state in the fast cookie
2011-07-24 21:16:42 -07:00
Love Hörnquist Åstrand
7f6f4206c6
make compile after rebase
2011-07-24 20:24:40 -07:00
Linus Nordberg
12203f0fab
s/krb5_decode_EncryptedData/krb5_decrypt_EncryptedData/1.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 20:24:39 -07:00
Linus Nordberg
294c2786fa
Fix typo.
...
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand
e5c66a70cd
parse fast cookie
2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand
d99c2eda40
use else if
2011-07-24 20:24:39 -07:00
Love Hörnquist Åstrand
eaa23ce96f
proxy request if needed
2011-07-24 20:24:39 -07:00
Love Hornquist Astrand
7e1468ca52
new call order too _krb5_fast_armor_key
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
99ed826f7f
use _krb5_fast_armor_key()
2011-07-24 20:24:38 -07:00
Love Hornquist Astrand
333471097d
break out fast unwrap
2011-07-24 20:24:37 -07:00
Love Hornquist Astrand
17d5f8d19e
make AS work with FAST
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
a2bcf8bbdd
break out mk_error
2011-07-24 20:24:36 -07:00
Love Hornquist Astrand
580b370e08
make pa-data optional
2011-07-24 20:24:35 -07:00
Love Hornquist Astrand
5edb5d0275
move out generic fast packet building into fast.c
2011-07-24 20:24:35 -07:00