Commit Graph

  • a388514712 Windows: fix two-phase commit docs Nicolas Williams 2016-02-26 12:08:05 -06:00
  • f261ed4f58 Fix ipropd_slave: no EDQUOT on WIN32 Nicolas Williams 2016-02-26 11:42:01 -06:00
  • 8343733562 kadmind: check ACLs for aliases CVE-2016-2400 Nicolas Williams 2016-02-12 13:52:31 -06:00
  • 50a45a946d Fix more HDB SQLite3 issues Nicolas Williams 2016-02-20 00:19:18 -06:00
  • 5867aa6873 hdb-sqlite: fix error code confusion Nicolas Williams 2016-02-12 13:03:06 -06:00
  • b4cf4de807 Fix warnings (clang 3.6) Nicolas Williams 2016-02-19 22:18:29 -06:00
  • dbf9750989 Tests: set db-dir so tests don't use /var/heimdal Nicolas Williams 2016-02-19 22:55:21 -06:00
  • ebc1ad34ba ipropd-master/slave: enhancements and bug fixes Nicolas Williams 2016-02-03 17:35:16 -06:00
  • 20df2c8706 Two-phase HDB commit via iprop log, + GC for log Nicolas Williams 2015-05-29 15:53:40 -05:00
  • d774aeda38 ipropd-master: add missing ret = Nicolas Williams 2016-01-24 17:48:00 -06:00
  • ab42f2882f Update valgrind suppressions Nicolas Williams 2016-01-28 15:16:36 -06:00
  • 7eb9b46f5b Document HDB backends Nicolas Williams 2015-06-01 20:12:37 -05:00
  • 16275048b8 Prefer LMDB to Berkeley DB Nicolas Williams 2015-06-01 15:58:53 -05:00
  • a94dc50114 Add --with-db-type-preference config param Nicolas Williams 2015-06-01 15:29:41 -05:00
  • c6f24e99f0 Revamp cf/db.m4; test LMDB Nicolas Williams 2015-06-01 11:48:31 -05:00
  • 76c26281a7 Fix sqlite HDB backend SQLITE_BUSY bug Nicolas Williams 2015-06-02 11:41:25 -05:00
  • fbc87e46fd Fix sqlite HDB backend init bug Nicolas Williams 2015-06-02 11:40:55 -05:00
  • 7df165003a Fix iprop-log dump leak Nicolas Williams 2015-05-29 18:10:23 -05:00
  • 5ee7209f6e kadmin init: init iprop log Nicolas Williams 2015-05-28 19:40:43 -05:00
  • d1fcf3dc67 ipropd_master: fix dump bug Nicolas Williams 2015-05-27 18:32:26 -05:00
  • 96859fe687 maybe-valgrind.sh: don't --trace-children=yes Nicolas Williams 2016-02-04 17:02:01 -06:00
  • abafa0a0a0 krb5_storage_free(): preserve errno Nicolas Williams 2016-01-26 18:56:06 -06:00
  • 996d4c5db3 Add krb5_ret/store_[u]int64() Nicolas Williams 2015-05-21 14:24:38 -05:00
  • 0271b171e5 Add bswap64() Nicolas Williams 2015-05-21 14:05:31 -05:00
  • 76965a2a14 Add missing initialization of mandatory Nicolas Williams 2015-05-27 17:05:29 -05:00
  • b1af99aa81 Fix memleak in lib/kadm5/set_keys.c Nicolas Williams 2015-05-29 18:27:55 -05:00
  • e4b61df46f Test parse_time() with minutes Nicolas Williams 2016-01-22 15:02:12 -06:00
  • ec2204f435 Use volatile to keep ct_memcmp() ct Nicolas Williams 2016-01-22 16:01:24 -06:00
  • 33ce593b6d gss_wrap/gss_unwrap_aead implementation Luke Howard 2015-12-16 19:09:30 +11:00
  • 6b5933337b Fix parallel build Brian May 2016-01-28 14:33:06 +11:00
  • 7cd40a6105 lib/krb5: allow predefined PAC_{LOGON_NAME,PRIVSVR_CHECKSUM,SERVER_CHECKSUM} elements in _krb5_pac_sign() Stefan Metzmacher 2016-01-07 14:12:14 +01:00
  • 1830d8c876 Appveyor: get past package manifest validation Nicolas Williams 2016-01-20 15:32:04 -06:00
  • a5f13331af Appveyor: workaround perl texinfo Nicolas Williams 2016-01-18 22:45:32 -06:00
  • cfd51be7fe Add appveyor.yml for Windows CI via Appveyor Nicolas Williams 2016-01-17 17:09:42 -06:00
  • 1575f4f69a KDC: Don't confuse master process with master Nicolas Williams 2016-01-20 15:17:06 -06:00
  • a6e36356b5 KDC: fix C-style Nicolas Williams 2016-01-20 15:14:01 -06:00
  • 4f87d85d65 Fix Windows build: no fork for kdc Nicolas Williams 2016-01-18 11:25:23 -06:00
  • 971ccce043 Detect fork et al for kdc Nicolas Williams 2016-01-18 12:23:23 -06:00
  • 78343d0907 Fix Windows tests: add missing hcrypto export Nicolas Williams 2016-01-18 18:12:08 -06:00
  • 62f797ed4e Fix Windows build (inc. roken.h before assert.h) Nicolas Williams 2016-01-18 11:00:32 -06:00
  • bfd72f9ed5 gssapi: correct OID for GSS_C_PEER_HAS_UPDATED_SPNEGO Luke Howard 2015-12-16 23:26:20 +11:00
  • f5b4ef3ed8 gssapi: plug leak in test_context IOV test Luke Howard 2015-12-09 19:04:48 +11:00
  • fdf8782db2 hcrypto: PKCS#11 backend Luke Howard 2015-11-26 00:16:17 +11:00
  • 494b11f962 hcrypto: fix spelling mistakes in comments Luke Howard 2015-12-09 11:07:29 +11:00
  • f789d8403e hx509: explicitly include ref/pkcs11.h Luke Howard 2015-12-09 11:03:48 +11:00
  • 0de138a7dc cf: define __EXTENSIONS__ on Solaris Luke Howard 2015-12-09 11:02:28 +11:00
  • acad7be65e base: Solaris and AIX atomic increment/exchange Luke Howard 2015-12-09 11:00:11 +11:00
  • ed3e748c75 hx509: update to newer PKCS#11 header Luke Howard 2015-12-09 10:59:08 +11:00
  • 54e6dbed29 libedit: Solaris portability fixes Luke Howard 2015-12-09 10:57:41 +11:00
  • d135020e8f kdc: Fix compile error on OS X Luke Howard 2015-12-09 10:46:38 +11:00
  • 9aeb08173a add CommonCrypto SHA-384/512 to test_bulk Luke Howard 2015-12-05 00:05:49 +11:00
  • 87c59d1db2 export CommonCrypto SHA-384/512 implementations Luke Howard 2015-12-05 00:04:24 +11:00
  • 5ae1ab038c Merge pull request #121 from heimdal/lukeh/cfb8 Luke Howard 2015-12-04 23:59:48 +11:00
  • 4f9cc8feea add CommonCrypto support for SHA-384 and SHA-512 Luke Howard 2015-12-04 23:56:12 +11:00
  • 93725f01f0 Fix broken CFB8 implementation, use CC for CFB8 Luke Howard 2015-02-07 14:34:23 +11:00
  • 2cac8ca703 Use pthread_once() when available Nicolas Williams 2015-11-30 11:03:56 -06:00
  • 9e359ac98f base: Windows heim_base_once_t cleanup Luke Howard 2015-11-30 17:34:32 +11:00
  • cc0e92a3c3 base: correct Windows heim_base_once_f semantics Nicolas Williams 2015-11-30 00:47:54 -05:00
  • 4735faba59 base: Windows implementation of heim_base_once Jeffrey Altman 2015-11-29 12:13:01 -05:00
  • 6fbe672451 hcrypto: Default to CommonCrypto on Apple OSes Jeffrey Altman 2015-11-24 09:48:44 -05:00
  • 3e6fffed60 include/Makefile.am: don't clean files that are distributed. Roland C. Dowdeswell 2015-11-06 17:06:26 -05:00
  • 352a7e94a3 Make the KDC use a multi-process model. Roland C. Dowdeswell 2013-04-23 12:35:11 +01:00
  • 3544bbc0b3 Update ack.texi Love Hörnquist Åstrand 2015-10-06 17:26:27 +02:00
  • c9f05de561 Merge pull request #142 from hasufell/master Love Hörnquist Åstrand 2015-10-06 17:25:17 +02:00
  • 427a60057c Completely remove RAND_egd support hasufell 2015-10-06 15:44:47 +02:00
  • 434020567a Update copyright.texi Love Hörnquist Åstrand 2015-09-28 10:52:47 +02:00
  • 7c86e09dd8 Update ack.texi Love Hörnquist Åstrand 2015-09-28 10:50:38 +02:00
  • 8a906db068 Merge pull request #141 from madscientist159/master Love Hörnquist Åstrand 2015-09-28 10:49:13 +02:00
  • f5f76ee72c Add ability to store extended principal attributes in LDAP A careful code review was undertaken, and it was determined that the best way to store the extended attributes was in a native ASN1 encoded field. LDAP does not understand the SEQUENCE of SEQUENCE structures used extensively throughout the extended attributes structure, and there was already a precedent set for storing the krb5Key data in a native ASN1 encoded field. Timothy Pearson 2015-09-26 16:23:55 -05:00
  • bb14c02e12 Merge pull request #140 from madscientist159/master Love Hörnquist Åstrand 2015-09-25 00:47:01 +02:00
  • 042b1ee7cb Do not crash if private key not found Timothy Pearson 2015-09-24 15:48:14 -05:00
  • 1d07f08351 Add ability to specifiy PKCS#11 slot number when using hx509 Example usage: kinit -C PKCS11:/usr/lib/opensc-pkcs11.so,slot=3 foo@BAR.TLD Timothy Pearson 2015-09-24 15:14:45 -05:00
  • c81572ab5d Windows: Remove *_PA_ClientCanon* from export list Jeffrey Altman 2015-09-13 20:34:41 -04:00
  • 0a5de96d72 Merge pull request #134 from abartlet/allow-null-authenticator Love Hörnquist Åstrand 2015-08-03 20:18:16 +02:00
  • 411da1fb31 Merge pull request #138 from abartlet/lorikeet-heimdal-for-upstream Andrew Bartlett 2015-07-31 18:03:07 +12:00
  • ad3acc2aef lib/gssapi/krb5: implement gss_[un]wrap_iov[_length] with arcfour-hmac-md5 Stefan Metzmacher 2009-08-11 19:48:50 +02:00
  • bafefad87f lib/gssapi/krb5: split out a arcfour_mic_cksum_iov() function Stefan Metzmacher 2015-06-18 14:07:43 +02:00
  • ef0059b8b6 lib/gssapi/krb5: add const to arcfour_mic_key() Stefan Metzmacher 2015-06-18 15:42:03 +02:00
  • 5f79ac2bb9 lib/gssapi/krb5: clear temporary buffer with cleartext data. Stefan Metzmacher 2015-06-18 14:06:57 +02:00
  • e33e47650a lib/gssapi/krb5: fix indentation in _gk_wrap_iov() Stefan Metzmacher 2015-06-18 12:20:26 +02:00
  • 63ed962041 lib/gssapi/krb5: make _gssapi_verify_pad() more robust Stefan Metzmacher 2015-06-18 15:43:32 +02:00
  • 078e6f5dd2 kdc: add support for HDB_ERR_WRONG_REALM Stefan Metzmacher 2015-02-10 14:37:29 +01:00
  • 81f9ed4a6c kdc: generic support for 3part servicePrincipalNames Stefan Metzmacher 2015-02-12 00:07:14 +01:00
  • a873e21d7c kdc: base _kdc_fast_mk_error() on krb5_mk_error_ext() Stefan Metzmacher 2015-02-13 09:26:01 +01:00
  • 25f3db919f lib/krb5: add krb5_mk_error_ext() helper function Stefan Metzmacher 2015-02-12 18:59:29 +01:00
  • bbff216dc6 lib/krb5: correctly follow KRB5_KDC_ERR_WRONG_REALM client referrals Stefan Metzmacher 2015-02-10 13:27:57 +01:00
  • ae4d222f58 lib/krb5: verify_logonname() to handle multi component principal Stefan Metzmacher 2015-05-20 13:40:58 +00:00
  • 20da6cad02 doc/standardisation: add rfc6806.txt Stefan Metzmacher 2015-06-18 16:09:06 +02:00
  • be37f24ef4 lib/ntlm: add missing dependency to libwind.la Stefan Metzmacher 2015-06-18 17:10:01 +02:00
  • 71c95fb38d Merge pull request #137 from douglasbagnall/oid-regenerate Andrew Bartlett 2015-07-31 16:15:55 +12:00
  • 832d7af018 GSSAPI: regenerate lib/gssapi/mech/gss_oid.c with consistent sort Douglas Bagnall 2015-07-31 14:34:19 +12:00
  • 0d31145e9d GSSAPI: generate full NULL structure initializers in gen-oid.pl Douglas Bagnall 2015-07-31 14:45:22 +12:00
  • 0c36f11f17 GSSAPI: keep consistent sort order in lib/gssapi/gen-oid.pl Douglas Bagnall 2015-07-31 11:49:55 +12:00
  • afab2ff867 GSSAPI: use rk_UNCONST() on password and cert oid Douglas Bagnall 2015-07-31 15:01:07 +12:00
  • f132e0b2a3 GSSAPI: update lib/gssapi/gen-oid.pl to work with Perl 5 Douglas Bagnall 2015-07-30 17:41:35 +12:00
  • 8508294940 gssapi: Allow a NULL authenticator Andrew Bartlett 2015-07-07 13:52:10 +12:00
  • db4175c225 Merge pull request #136 from HenryJacques/pkinit_improvements Love Hörnquist Åstrand 2015-07-24 12:04:47 +02:00
  • 5a4e9d1539 Fix typo HenryJacques 2015-07-20 10:45:06 +02:00
  • 35a569bd83 Allow to use more than one token HenryJacques 2015-07-20 10:14:38 +02:00
  • 1639697c97 add error codes related to User PIN HenryJacques 2015-07-20 10:12:50 +02:00