Commit Graph

  • 76965a2a14 Add missing initialization of mandatory Nicolas Williams 2015-05-27 17:05:29 -05:00
  • b1af99aa81 Fix memleak in lib/kadm5/set_keys.c Nicolas Williams 2015-05-29 18:27:55 -05:00
  • e4b61df46f Test parse_time() with minutes Nicolas Williams 2016-01-22 15:02:12 -06:00
  • ec2204f435 Use volatile to keep ct_memcmp() ct Nicolas Williams 2016-01-22 16:01:24 -06:00
  • 33ce593b6d gss_wrap/gss_unwrap_aead implementation Luke Howard 2015-12-16 19:09:30 +11:00
  • 6b5933337b Fix parallel build Brian May 2016-01-28 14:33:06 +11:00
  • 7cd40a6105 lib/krb5: allow predefined PAC_{LOGON_NAME,PRIVSVR_CHECKSUM,SERVER_CHECKSUM} elements in _krb5_pac_sign() Stefan Metzmacher 2016-01-07 14:12:14 +01:00
  • 1830d8c876 Appveyor: get past package manifest validation Nicolas Williams 2016-01-20 15:32:04 -06:00
  • a5f13331af Appveyor: workaround perl texinfo Nicolas Williams 2016-01-18 22:45:32 -06:00
  • cfd51be7fe Add appveyor.yml for Windows CI via Appveyor Nicolas Williams 2016-01-17 17:09:42 -06:00
  • 1575f4f69a KDC: Don't confuse master process with master Nicolas Williams 2016-01-20 15:17:06 -06:00
  • a6e36356b5 KDC: fix C-style Nicolas Williams 2016-01-20 15:14:01 -06:00
  • 4f87d85d65 Fix Windows build: no fork for kdc Nicolas Williams 2016-01-18 11:25:23 -06:00
  • 971ccce043 Detect fork et al for kdc Nicolas Williams 2016-01-18 12:23:23 -06:00
  • 78343d0907 Fix Windows tests: add missing hcrypto export Nicolas Williams 2016-01-18 18:12:08 -06:00
  • 62f797ed4e Fix Windows build (inc. roken.h before assert.h) Nicolas Williams 2016-01-18 11:00:32 -06:00
  • bfd72f9ed5 gssapi: correct OID for GSS_C_PEER_HAS_UPDATED_SPNEGO Luke Howard 2015-12-16 23:26:20 +11:00
  • f5b4ef3ed8 gssapi: plug leak in test_context IOV test Luke Howard 2015-12-09 19:04:48 +11:00
  • fdf8782db2 hcrypto: PKCS#11 backend Luke Howard 2015-11-26 00:16:17 +11:00
  • 494b11f962 hcrypto: fix spelling mistakes in comments Luke Howard 2015-12-09 11:07:29 +11:00
  • f789d8403e hx509: explicitly include ref/pkcs11.h Luke Howard 2015-12-09 11:03:48 +11:00
  • 0de138a7dc cf: define __EXTENSIONS__ on Solaris Luke Howard 2015-12-09 11:02:28 +11:00
  • acad7be65e base: Solaris and AIX atomic increment/exchange Luke Howard 2015-12-09 11:00:11 +11:00
  • ed3e748c75 hx509: update to newer PKCS#11 header Luke Howard 2015-12-09 10:59:08 +11:00
  • 54e6dbed29 libedit: Solaris portability fixes Luke Howard 2015-12-09 10:57:41 +11:00
  • d135020e8f kdc: Fix compile error on OS X Luke Howard 2015-12-09 10:46:38 +11:00
  • 9aeb08173a add CommonCrypto SHA-384/512 to test_bulk Luke Howard 2015-12-05 00:05:49 +11:00
  • 87c59d1db2 export CommonCrypto SHA-384/512 implementations Luke Howard 2015-12-05 00:04:24 +11:00
  • 5ae1ab038c Merge pull request #121 from heimdal/lukeh/cfb8 Luke Howard 2015-12-04 23:59:48 +11:00
  • 4f9cc8feea add CommonCrypto support for SHA-384 and SHA-512 Luke Howard 2015-12-04 23:56:12 +11:00
  • 93725f01f0 Fix broken CFB8 implementation, use CC for CFB8 Luke Howard 2015-02-07 14:34:23 +11:00
  • 2cac8ca703 Use pthread_once() when available Nicolas Williams 2015-11-30 11:03:56 -06:00
  • 9e359ac98f base: Windows heim_base_once_t cleanup Luke Howard 2015-11-30 17:34:32 +11:00
  • cc0e92a3c3 base: correct Windows heim_base_once_f semantics Nicolas Williams 2015-11-30 00:47:54 -05:00
  • 4735faba59 base: Windows implementation of heim_base_once Jeffrey Altman 2015-11-29 12:13:01 -05:00
  • 6fbe672451 hcrypto: Default to CommonCrypto on Apple OSes Jeffrey Altman 2015-11-24 09:48:44 -05:00
  • 3e6fffed60 include/Makefile.am: don't clean files that are distributed. Roland C. Dowdeswell 2015-11-06 17:06:26 -05:00
  • 352a7e94a3 Make the KDC use a multi-process model. Roland C. Dowdeswell 2013-04-23 12:35:11 +01:00
  • 3544bbc0b3 Update ack.texi Love Hörnquist Åstrand 2015-10-06 17:26:27 +02:00
  • c9f05de561 Merge pull request #142 from hasufell/master Love Hörnquist Åstrand 2015-10-06 17:25:17 +02:00
  • 427a60057c Completely remove RAND_egd support hasufell 2015-10-06 15:44:47 +02:00
  • 434020567a Update copyright.texi Love Hörnquist Åstrand 2015-09-28 10:52:47 +02:00
  • 7c86e09dd8 Update ack.texi Love Hörnquist Åstrand 2015-09-28 10:50:38 +02:00
  • 8a906db068 Merge pull request #141 from madscientist159/master Love Hörnquist Åstrand 2015-09-28 10:49:13 +02:00
  • f5f76ee72c Add ability to store extended principal attributes in LDAP A careful code review was undertaken, and it was determined that the best way to store the extended attributes was in a native ASN1 encoded field. LDAP does not understand the SEQUENCE of SEQUENCE structures used extensively throughout the extended attributes structure, and there was already a precedent set for storing the krb5Key data in a native ASN1 encoded field. Timothy Pearson 2015-09-26 16:23:55 -05:00
  • bb14c02e12 Merge pull request #140 from madscientist159/master Love Hörnquist Åstrand 2015-09-25 00:47:01 +02:00
  • 042b1ee7cb Do not crash if private key not found Timothy Pearson 2015-09-24 15:48:14 -05:00
  • 1d07f08351 Add ability to specifiy PKCS#11 slot number when using hx509 Example usage: kinit -C PKCS11:/usr/lib/opensc-pkcs11.so,slot=3 foo@BAR.TLD Timothy Pearson 2015-09-24 15:14:45 -05:00
  • c81572ab5d Windows: Remove *_PA_ClientCanon* from export list Jeffrey Altman 2015-09-13 20:34:41 -04:00
  • 0a5de96d72 Merge pull request #134 from abartlet/allow-null-authenticator Love Hörnquist Åstrand 2015-08-03 20:18:16 +02:00
  • 411da1fb31 Merge pull request #138 from abartlet/lorikeet-heimdal-for-upstream Andrew Bartlett 2015-07-31 18:03:07 +12:00
  • ad3acc2aef lib/gssapi/krb5: implement gss_[un]wrap_iov[_length] with arcfour-hmac-md5 Stefan Metzmacher 2009-08-11 19:48:50 +02:00
  • bafefad87f lib/gssapi/krb5: split out a arcfour_mic_cksum_iov() function Stefan Metzmacher 2015-06-18 14:07:43 +02:00
  • ef0059b8b6 lib/gssapi/krb5: add const to arcfour_mic_key() Stefan Metzmacher 2015-06-18 15:42:03 +02:00
  • 5f79ac2bb9 lib/gssapi/krb5: clear temporary buffer with cleartext data. Stefan Metzmacher 2015-06-18 14:06:57 +02:00
  • e33e47650a lib/gssapi/krb5: fix indentation in _gk_wrap_iov() Stefan Metzmacher 2015-06-18 12:20:26 +02:00
  • 63ed962041 lib/gssapi/krb5: make _gssapi_verify_pad() more robust Stefan Metzmacher 2015-06-18 15:43:32 +02:00
  • 078e6f5dd2 kdc: add support for HDB_ERR_WRONG_REALM Stefan Metzmacher 2015-02-10 14:37:29 +01:00
  • 81f9ed4a6c kdc: generic support for 3part servicePrincipalNames Stefan Metzmacher 2015-02-12 00:07:14 +01:00
  • a873e21d7c kdc: base _kdc_fast_mk_error() on krb5_mk_error_ext() Stefan Metzmacher 2015-02-13 09:26:01 +01:00
  • 25f3db919f lib/krb5: add krb5_mk_error_ext() helper function Stefan Metzmacher 2015-02-12 18:59:29 +01:00
  • bbff216dc6 lib/krb5: correctly follow KRB5_KDC_ERR_WRONG_REALM client referrals Stefan Metzmacher 2015-02-10 13:27:57 +01:00
  • ae4d222f58 lib/krb5: verify_logonname() to handle multi component principal Stefan Metzmacher 2015-05-20 13:40:58 +00:00
  • 20da6cad02 doc/standardisation: add rfc6806.txt Stefan Metzmacher 2015-06-18 16:09:06 +02:00
  • be37f24ef4 lib/ntlm: add missing dependency to libwind.la Stefan Metzmacher 2015-06-18 17:10:01 +02:00
  • 71c95fb38d Merge pull request #137 from douglasbagnall/oid-regenerate Andrew Bartlett 2015-07-31 16:15:55 +12:00
  • 832d7af018 GSSAPI: regenerate lib/gssapi/mech/gss_oid.c with consistent sort Douglas Bagnall 2015-07-31 14:34:19 +12:00
  • 0d31145e9d GSSAPI: generate full NULL structure initializers in gen-oid.pl Douglas Bagnall 2015-07-31 14:45:22 +12:00
  • 0c36f11f17 GSSAPI: keep consistent sort order in lib/gssapi/gen-oid.pl Douglas Bagnall 2015-07-31 11:49:55 +12:00
  • afab2ff867 GSSAPI: use rk_UNCONST() on password and cert oid Douglas Bagnall 2015-07-31 15:01:07 +12:00
  • f132e0b2a3 GSSAPI: update lib/gssapi/gen-oid.pl to work with Perl 5 Douglas Bagnall 2015-07-30 17:41:35 +12:00
  • 8508294940 gssapi: Allow a NULL authenticator Andrew Bartlett 2015-07-07 13:52:10 +12:00
  • db4175c225 Merge pull request #136 from HenryJacques/pkinit_improvements Love Hörnquist Åstrand 2015-07-24 12:04:47 +02:00
  • 5a4e9d1539 Fix typo HenryJacques 2015-07-20 10:45:06 +02:00
  • 35a569bd83 Allow to use more than one token HenryJacques 2015-07-20 10:14:38 +02:00
  • 1639697c97 add error codes related to User PIN HenryJacques 2015-07-20 10:12:50 +02:00
  • 75a304c452 Fix typo HenryJacques 2015-07-20 10:08:57 +02:00
  • 5cf302def7 Add new error codes related to PIN HenryJacques 2015-07-20 10:07:08 +02:00
  • be63a2914a heimdal:krb5.asn1: remove KRB5_PADATA_CLIENT_CANONICALIZED handling Stefan Metzmacher 2015-03-10 12:38:55 +01:00
  • 29f6290fe6 lib/krb5: Remove KRB5_PADATA_CLIENT_CANONICALIZED from ticket.c Andrew Bartlett 2015-05-09 09:50:52 +01:00
  • 358e2b7b0a kdc: remove KRB5_PADATA_CLIENT_CANONICALIZED handling Stefan Metzmacher 2015-04-28 16:43:22 +12:00
  • 8c8a39b0b7 heimdal:lib/krb5: let build_logon_name() use KRB5_PRINCIPAL_UNPARSE_DISPLAY Stefan Metzmacher 2015-03-10 15:33:14 +01:00
  • 2e6318f09a heimdal:lib/krb5: allow enterprise principals in verify_logonname() Stefan Metzmacher 2015-03-10 15:36:01 +01:00
  • 02616866e5 heimdal: Fix the developer O3 build Volker Lendecke 2015-02-25 12:19:40 +00:00
  • c450abd01a heimdal: Ensure that HDB_ERR_NOT_FOUND_HERE, critical for the RODC, is not overwritten Andrew Bartlett 2015-01-21 11:45:45 +13:00
  • 0f19fdec83 s4-heimdal: fix krb5_get_init_creds_opt_set_process_last_req(). Günther Deschner 2014-05-07 08:19:56 +02:00
  • e5144acab0 heimdal: Use krb5_free_default_realm() for free() Santosh Kumar Pradhan 2014-02-21 09:48:31 +05:30
  • 324ac13b32 heimdal: remove checking of KDC PAC signature, delegate to wdc plugin Andrew Bartlett 2012-01-11 18:19:14 +11:00
  • 5c8e3c6108 Fix shell syntax in COVERITY_SCAN_BRANCH test Andrew Bartlett 2015-04-28 16:02:19 +12:00
  • 95256a6129 kdc: Preserve error code from Pre Authentication .validate hook Andrew Bartlett 2014-12-18 16:15:17 +13:00
  • 960fa481be Add test for incorrect password Andrew Bartlett 2014-12-18 15:15:42 +13:00
  • 50e2a5ce95 (patch) man page syntax errors Sergio Gelato 2015-05-25 14:09:16 +02:00
  • 05a919b94b iprop slave: try incremental after complete xfer Nicolas Williams 2015-05-19 00:27:30 -05:00
  • 4158ddbc25 Fix HDB rename/close order in iprop slave Nicolas Williams 2015-05-19 00:26:34 -05:00
  • 409501e5e4 Tolerate some time-travel by slaves Nicolas Williams 2015-05-19 00:24:00 -05:00
  • 854aaab182 iprop master: Don't ignore flock() result Nicolas Williams 2015-05-19 00:21:35 -05:00
  • 56b67ac2eb start-realm: don't write NUL Nicolas Williams 2015-05-18 17:19:54 -05:00
  • 26c7affa70 roken: fix 0acef7729f Jeffrey Altman 2015-05-20 11:05:38 -04:00
  • 0acef7729f roken: fix append_string "%.s" non-nul termination Jeffrey Altman 2015-05-20 10:27:12 -04:00
  • e51c2126e6 Merge pull request #128 from kiransj/patch-1 Love Hörnquist Åstrand 2015-04-30 00:25:30 -07:00