6 Commits

Author	SHA1	Message	Date
Nicolas Williams	56c6120522	httpkadmind: Make more like bx509d internally ... - Correct handling of POST (before POSTs with non-zero-length bodies would cause the server to close the connection). - Add CSRF features from bx509d.	2022-10-02 22:46:37 -05:00
Nicolas Williams	d93f0d103d	httpkadmind: Clarify namespace in man page	2022-04-26 17:54:12 -05:00
Nicolas Williams	18f44e7e90	httpkadmind: Make get_keys_max_spns configurable	2022-04-25 22:24:51 -05:00
Nicolas Williams	a5273d18cd	httpkadmind: Support ok-as-delegate and such ... Add support for configuring the attributes of new principals created via httpkadmind. This can be done via virtual host-based service namespaces, which will provide default attributes even if disabled (but the created principals will not be disabled, naturally), or via krb5.conf.	2022-04-25 22:24:51 -05:00
Nicolas Williams	855b27ccfb	httpkadmind: Allow host SPNs to fetch selves ... Combined with the synthetic_clients feature, this will allow hosts that have a PKINIT-worthy client certificate with a SAN with their host principals to create their own principals and "extract" their host keytabs. Together with some other PKIX credential bootstrapping protocol, this can help hosts bootstrap Kerberos host credentials.	2021-06-29 14:52:07 -05:00
Nicolas Williams	9574783d04	kdc: Add httpkadmind ... TBD: - improve error handling, logging, tracing! - move all REST services out of kdc/	2020-09-08 14:34:08 -05:00