Commit Graph

Select branches

Hide Pull Requests

kadmin-get-printf-debugging

master

sd-notify

sdnotify-nix-testing

systemd-support

git2svn-syncpoint-master

switch-from-svn-to-git

Mono Color

• 58b4b1f06e nix: fix package, test, and module with systemd integration sdnotify-nix-testing oysteikt 2026-07-22 04:46:04 +09:00
• 583408b3e3 nix/nixosTest: fix oysteikt 2026-02-14 01:11:00 +09:00
• f8cc75b9c6 Set up nix tooling oysteikt 2025-03-26 12:25:38 +01:00
• 69e74be224 kadmind: add support for systemd socket activation oysteikt 2026-07-22 04:43:00 +09:00
• f6ec5e5f9a kpasswd: add support for systemd socket activation oysteikt 2026-07-22 04:42:36 +09:00
• 049748c182 kdc: add support for systemd socket activation oysteikt 2026-07-22 04:42:06 +09:00
• 85b816b5bc kadmind: add sd_notify start/stop signals oysteikt 2026-07-22 04:41:40 +09:00
• b795025613 kpasswd: add sd_notify start/stop signals oysteikt 2026-07-22 04:41:40 +09:00
• 4cba7c91d1 kdc: add sd_notify start/stop signals oysteikt 2026-07-22 04:41:31 +09:00
• 55558e6624 nix/nixosTest: fix master oysteikt 2026-02-14 01:11:00 +09:00
• 490086e743 Set up nix tooling oysteikt 2025-03-26 12:25:38 +01:00
• 8353f7c55a zed: set tab width oysteikt 2025-03-26 09:35:05 +01:00
• 6bb4ff842d lib/roken: fix hex digit table initializer Roland C. Dowdeswell 2026-06-30 13:13:37 +01:00
• 5b90bc8285 roken:strsep_copy: Fix out-of-bounds write in strsep_copy Daniil Sarafannikov 2026-06-26 00:04:09 +04:00
• 22e73b6fcb Better fix for #1399 Nicolas Williams 2026-06-20 16:06:53 -05:00
• ac1c2d05bc krb5: Fix a double free when running into ENOMEM Linar Galimov 2026-06-23 02:22:40 +04:00
• 37f93f85dd gss-token: add local user authorization check Roland C. Dowdeswell 2026-06-21 11:02:03 +01:00
• 6386d8ff82 kdc: Fix possible double free of ac pointer Daniil Sarafannikov 2026-06-19 15:45:08 +04:00
• afc4c486a1 lib/asn1: fix USE_AFTER_FREE in der_print_hex_heim_integer mikhailofff 2026-06-18 09:05:29 +04:00
• 9df6b9e13a GHA: add Debian i386 build Roland C. Dowdeswell 2026-06-16 14:46:22 +01:00
• 13d0215c54 configure: pass year2038 flags in CPPFLAGS Roland C. Dowdeswell 2026-06-16 14:46:08 +01:00
• 759f9f228b NEWS: mention 32-bit time_t ASN.1 clamp Roland C. Dowdeswell 2026-06-16 12:04:08 +01:00
• 5ac91f2dc9 hx509: preserve received certificate encodings Roland C. Dowdeswell 2026-06-16 12:03:50 +01:00
• d67a2c36c4 tests: avoid ephemeral port range Roland C. Dowdeswell 2026-06-13 00:37:44 +01:00
• 9cf1b20313 asn1: clamp far-future times on 32-bit time_t Roland C. Dowdeswell 2026-06-10 13:20:12 +01:00
• 97b07c5632 krb5: skip vanished keyring ccache keys Roland C. Dowdeswell 2026-06-10 16:42:23 +01:00
• 8a0fc8d032 Add credential cache coverage tests Roland C. Dowdeswell 2026-06-08 16:34:43 +01:00
• 34ab0b7c77 asn1: fix open type alignment on ILP32 Roland C. Dowdeswell 2026-06-10 13:19:51 +01:00
• 9bb80f4747 hx509: choose certificate time encoding portably Roland C. Dowdeswell 2026-06-10 13:20:59 +01:00
• 5ebe5b4582 asn1: compare int32 default values safely Roland C. Dowdeswell 2026-06-10 13:21:41 +01:00
• f609aae209 krb5: avoid time-difference overflow Roland C. Dowdeswell 2026-06-10 13:15:12 +01:00
• fdeb3e6e4e Revert "README.md: Drop Coveralls badge (not updating)" Nicolas Williams 2026-06-08 13:25:07 -05:00
• 16a8e31d34 GHA: Build coverage for master branch too Nicolas Williams 2026-06-08 13:26:12 -05:00
• cdc82913d5 kdc: typos in MAX_TIME macros Roland C. Dowdeswell 2026-06-08 17:25:07 +01:00
• 2194be6c92 asn1: Include <errno.h> before using/checking bits from it Pino Toscano 2026-06-06 22:25:09 +02:00
• 2594691dfd Define HAVE_DB_185_H if db_185.h is present Ihar Hrachyshka 2024-10-15 13:52:39 -04:00
• a735b65b70 gssapi: avoid putenv use-after-free in store_cred Roland C. Dowdeswell 2026-05-27 17:20:23 +01:00
• 1f0f31c954 roken: Don't define any global vars in the pidfile namespace. Roy Marples 2026-05-30 11:25:32 +01:00
• e1ab030717 kdc: reject kx509 requests when disabled Roland C. Dowdeswell 2026-05-28 16:56:18 +01:00
• 421c40c73e kadm5: make ipropd-master listen on IPv6 Roland C. Dowdeswell 2026-05-25 12:18:05 +01:00
• de7aa57362 treewide: fix many null dereference reports Roland C. Dowdeswell 2026-05-27 18:31:12 +01:00
• 9a9da70626 krb5: clean up get_cred_kdc on send context failure Roland C. Dowdeswell 2026-05-27 16:58:44 +01:00
• e3a59b65d3 kadmin: generate stronger random passwords Roland C. Dowdeswell 2026-05-27 01:05:39 +01:00
• 98d6fcacb4 krb5: fix ap_req_nofail documentation Roland C. Dowdeswell 2026-05-27 11:19:58 +01:00
• 4f147f5e1b doc: trim krb5_verify_user xrefs Roland C. Dowdeswell 2026-05-27 15:55:32 +01:00
• ef3860d6c3 doc: clean up krb5_init_context man page Roland C. Dowdeswell 2026-05-27 15:21:24 +01:00
• 20d4e914e3 gss: Fix NULL minor_status arguments Alexey Shapovalov 2022-12-14 12:06:56 +00:00
• cdd22b6061 refactor(changepw): replace select() with poll() Florian Best 2026-03-27 00:44:22 +01:00
• 73acb1df8e refactor(send_to_kdc): replace select() with poll() Florian Best 2026-03-26 21:11:29 +01:00
• abec12ef7f ipropd-slave: get a TGT before authenticating Roland C. Dowdeswell 2026-05-26 22:25:12 +01:00
• 2e3bb95430 Add KDC-free GSS tests Roland C. Dowdeswell 2026-05-19 14:14:01 +01:00
• a66cb84e70 In krb5.conf make underscores and dashes equivalent Roland C. Dowdeswell 2019-10-23 22:40:57 +01:00
• e89417f2a1 tests: cover MEMORY ccache cursor invalidation for #547 Roland C. Dowdeswell 2026-05-21 11:46:47 +01:00
• a105e8e117 tests: cover MEMORY gss_store_cred storage for #132 Roland C. Dowdeswell 2026-05-21 11:50:01 +01:00
• 56b55e7c9b add CI/CD for libedit and readline Roland C. Dowdeswell 2026-05-24 10:35:08 +01:00
• e836e36d06 Remove duplicated libedit, find/use installed version Roland C. Dowdeswell 2026-04-27 22:46:52 +01:00
• 19325d4252 lib/gssapi/test_context.c: fix typo Roland C. Dowdeswell 2026-05-25 11:51:19 +01:00
• 3ff4191ba9 krb5: fail krb5_verify_user() early if service key missing Roland C. Dowdeswell 2026-05-25 14:48:55 +01:00
• 73bab3fea5 tests/kdc/leaks-kill.sh: typo Roland C. Dowdeswell 2026-05-22 18:51:37 +01:00
• d47f526f55 ipc: serialize mig generated files Roland C. Dowdeswell 2026-05-25 18:47:05 +01:00
• 6efb8b405e roken: provide poll fallback Roland C. Dowdeswell 2026-05-24 18:34:54 +01:00
• 6ce504ad84 kdc/kdc.8: move a comma Roland C. Dowdeswell 2026-04-03 16:59:01 +01:00
• 378a367c9e kdc: Allow KDC plugin to handle attempts to authenticate without using hardware authentication Jennifer Sutton 2024-05-15 15:00:48 +12:00
• 6d2d9632da kdc: Check return value of pa_enc_ts_decrypt_kvno() Jennifer Sutton 2024-02-14 15:04:39 +13:00
• c65cd331e4 gsskrb5: Correctly check EVP_Cipher() return value for RC4 Jennifer Sutton 2026-03-24 14:38:06 +13:00
• f93aeb3f8f krb5: Correctly check if RC4 enctype is valid Jennifer Sutton 2026-03-24 14:42:07 +13:00
• dafc36e26c krb5: Promote AES SHA2 enctypes to preferred Jennifer Sutton 2026-03-24 15:00:52 +13:00
• b7f4f62dfa krb5: Fix non‐RC4 build Jennifer Sutton 2026-03-24 15:28:53 +13:00
• 31c514e3b2 kdc: Adjust error code mapping Jennifer Sutton 2026-03-26 12:13:35 +13:00
• 356b2111ba dbutils: fix order of libraries for static build Rudi Heitbaum 2026-03-29 23:01:03 +11:00
• 93bbac45f9 Install heim_threads.h Roland C. Dowdeswell 2026-03-23 15:58:25 +00:00
• e4a885074b krb5: make KRB5_TRACE default to tracing not just debugging Roland C. Dowdeswell 2026-05-19 00:59:14 +01:00
• ffb01963fc lib:roken: allow large fragmented UDP replies from glibc resolver Ivan Korytov 2026-03-13 12:17:55 +03:00
• 8dba1f4810 add a bit more logging in gss mechglue Roland C. Dowdeswell 2024-11-20 12:41:45 +00:00
• e11f8a8823 Eliminate \n from _gss_mg_log() calls Roland C. Dowdeswell 2024-11-20 11:40:20 +00:00
• abd35b246a kdc: support pkinit_kdc_revoke for pkinit anchors Kacper Boström 2022-05-05 13:03:27 +02:00
• bddc275275 ktutil: Collect entries then add/delete when renaming principals (fix #1319) Nicolas Williams 2026-02-08 01:35:58 -06:00
• 609e36de13 krb5: Only lock keytabs to write to them (fix #1319) Nicolas Williams 2026-02-08 01:30:28 -06:00
• 3a17ecb3e5 WIP systemd-support oysteikt 2026-02-08 16:07:33 +09:00
• 19156b61f1 Set up nix tooling oysteikt 2025-03-26 12:25:38 +01:00
• 63ad2a7931 zed: set tab width oysteikt 2025-03-26 09:35:05 +01:00
• 8ec31e4926 GHA: Shorten the OS X test timeout Nicolas Williams 2026-02-08 00:36:43 -06:00
• 0a9f1c3f11 GHA: Get diagnostics data from hanging check-context test (OS X) Nicolas Williams 2026-02-07 23:56:02 -06:00
• 4fe0ad8e2c GHA: Get diagnostics data from hanging check-context test Nicolas Williams 2026-02-07 22:45:45 -06:00
• c999e5a33a GHA: Set a timeout on tests Nicolas Williams 2026-02-05 20:12:17 -06:00
• ce85c64b84 iprop: Make ipropd-master not lock the log (fix #1308) Nicolas Williams 2026-01-25 22:28:00 -06:00
• c76a096a28 roken: Add pread() for Windows Nicolas Williams 2026-01-25 21:09:14 -06:00
• 8a22366b55 roken: Don't define flock() ops if HAVE_FLOCK (fix #1313) Nicolas Williams 2026-01-24 23:33:59 -06:00
• 1a7e3c4a5c kadm5: Fix client-side double-free (fix #1315) Nicolas Williams 2026-02-07 17:45:14 -06:00
• 845fb73ad1 WIP kadmin-get-printf-debugging oysteikt 2026-02-02 08:53:06 +09:00
• d0b5821e9a Set up nix tooling oysteikt 2025-03-26 12:25:38 +01:00
• 072c1f062f zed: set tab width oysteikt 2025-03-26 09:35:05 +01:00
• df0e15fcdf tests: Disable cheeck-iprop until fix is ready Nicolas Williams 2026-01-24 14:42:38 -06:00
• 8a67a1f77c Revert "kpasswdd: Allow password changes through NATs (fix #1286)" Nicolas Williams 2026-01-23 00:36:05 -06:00
• 26dca502be kpasswdd: Allow password changes through NATs (fix #1286 again) Nicolas Williams 2026-01-23 00:37:34 -06:00
• cc272a4838 krb5: Try up to all kpasswdd IPs (fix #1304) Nicolas Williams 2026-01-22 23:38:42 -06:00
• dedeea1b6a sqlite: Fix warnings (fix #1306) Nicolas Williams 2026-01-22 23:32:14 -06:00
• 7dec4d7f02 bx509d: Stop taking unnecessary flock (fix #1308) Nicolas Williams 2026-01-22 22:25:24 -06:00
• 961370d49f krb5: Add support for "Directional" host address type Nicolas Williams 2026-01-22 20:57:07 -06:00
• f37749adc7 kpasswdd: Allow password changes through NATs (fix #1286) Nicolas Williams 2026-01-22 20:56:28 -06:00