oysteikt/heimdal
0
0
Fork 0
Code Issues 4 Pull Requests Releases Activity

Commit Graph

  • a7587b08e2 Support hostname:port svc princs Nicolas Williams 2015-03-20 17:42:59 -05:00
  • 5fffc4061f Don't use canon rules in principal name comparison Nicolas Williams 2015-03-24 11:49:05 -05:00
  • 487b6820f6 Revamp name canonicalization code Nicolas Williams 2015-03-15 18:20:05 -05:00
  • a1c87df260 Add guard in krb5_free_creds() Nicolas Williams 2015-03-24 11:47:58 -05:00
  • 902aa4ee02 tests on Windows Jeffrey Altman 2015-03-21 15:44:48 -04:00
  • 2c68305856 hcrypto: Remove w32crypt NTDDI_VERSION checks Jeffrey Altman 2015-03-21 15:43:33 -04:00
  • 540c3273c4 kadmin: improve warnings in ext_keytab Nicolas Williams 2015-03-16 11:36:28 -05:00
  • 15e69fbb58 kadmin: add ext_keytab --random-key switch Jeffrey Altman 2015-03-16 11:28:12 -05:00
  • 34bf7ae162 kadmind: don't send bogus keys to ext_keytab et al Jeffrey Altman 2015-03-16 11:03:58 -05:00
  • 6043cc8c88 kadmind: check for KADM5_PRIV_GET when op GET Jeffrey Altman 2015-03-16 10:47:16 -05:00
  • 9fbbc4cf85 Refactor capath_worker() a bit more Nicolas Williams 2015-03-16 10:40:10 -05:00
  • 69b0a8f4eb kadm5: kadmin modify must refuse bogus keys Nicolas Williams 2015-03-12 00:51:16 -05:00
  • dcbe8ae73b kadmin: do_ext_keytab add bogus key warnings Nicolas Williams 2015-03-12 22:24:24 -04:00
  • 1bfb759a64 kadmin: refactor do_ext_keytab for common cleanup Jeffrey Altman 2015-03-12 22:20:24 -04:00
  • 14195658a4 kadmin: del_enctype check for bogus keys Nicolas Williams 2015-03-12 21:44:59 -04:00
  • 7ab1e01d75 kadmin: add_enctype check for bogus keys Nicolas Williams 2015-03-12 21:42:48 -04:00
  • edb6c1b075 kadmin: del_enctype whitespace Nicolas Williams 2015-03-12 21:41:42 -04:00
  • 6683650337 kadmin: add_enctype fix whitespace Nicolas Williams 2015-03-12 21:39:00 -04:00
  • db72e66eb9 kadm5: Add functions to check for bogus keys Nicolas Williams 2015-03-12 14:42:22 -05:00
  • cfdf6d5cbe gsskrb5: Make krb5 mech use referrals Viktor Dukhovni 2015-03-11 18:27:34 -05:00
  • 8a5d50a328 krb5: do not store TGTs if GC_NO_STORE Nicolas Williams 2015-03-11 16:43:00 -05:00
  • b84bdf213d krb5: improve comments in get_cred_kdc_capath_worker Nicolas Williams 2015-03-12 21:20:09 -04:00
  • 4f074487b4 krb5: reject referrals in capath code paths Nicolas Williams 2015-03-12 21:15:53 -04:00
  • e13c0946f6 krb5: refactor get_cred_kdc_capath_worker Jeffrey Altman 2015-03-12 21:09:47 -04:00
  • c37f1b3e4f krb5: Don't cache/reuse referral TGTs Nicolas Williams 2015-03-11 15:32:05 -05:00
  • d9e3e376a3 tests: Add simple key history test for kdc Nicolas Williams 2015-03-11 12:22:25 -05:00
  • 95e56fa3ae hdb: fix hdb_unseal_keys_kvno return when no history Nicolas Williams 2015-03-10 23:35:32 -05:00
  • 83011252d7 kdc: adjust flags passed to hdb_fetch_kvno() Jeffrey Altman 2015-03-10 15:03:08 -04:00
  • fca6363307 Drop delegated creds when target is NULL Viktor Dukhovni 2015-03-04 02:38:09 +00:00
  • ca052eadd5 Fix gss_inquire_cred_by_mech. Viktor Dukhovni 2015-03-04 02:24:54 +00:00
  • 8485250989 roken: Add memset_s implementation Simon Wilkinson 2015-03-05 10:34:09 +00:00
  • 745eeb1252 Ensure DER form of hxtool ca random serial numbers Viktor Dukhovni 2015-03-05 03:27:15 -05:00
  • b7ca6bbc7a Revert "make sure that serial number is valid DER when done ..." Viktor Dukhovni 2015-03-05 03:56:04 -05:00
  • 35add96d37 make sure that serial number is valid DER when done (found by Viktor Dukhovni) Love Hörnquist Åstrand 2015-03-05 00:26:03 -08:00
  • 920eccc59e X11 tools have outlived their usefulness, use SSH and pam with native locker Love Hörnquist Åstrand 2015-03-04 19:18:00 -08:00
  • d4fda7e4f0 LLVM unused variable warning Viktor Dukhovni 2015-03-04 19:52:58 -05:00
  • 0d52fd607f LLVM enum range warning Viktor Dukhovni 2015-03-04 19:52:26 -05:00
  • ba39f42b81 TBS vs Certificate sigalg consistency for RSA Viktor Dukhovni 2015-03-04 19:51:11 -05:00
  • 08c628b240 BN_is_negative is no longer a macro in OpenSSL master Viktor Dukhovni 2015-03-04 19:49:40 -05:00
  • 529f17bbec OpenSSL master requires more explicit #includes Viktor Dukhovni 2015-03-04 19:46:22 -05:00
  • a71fa7b04d Silence LLVM compiler warnings Viktor Dukhovni 2015-03-04 19:44:20 -05:00
  • c3ddece8d4 Name canon kdc config breaks iprop Viktor Dukhovni 2015-03-04 17:04:20 -05:00
  • e4a8571434 Fix DB: prefix check Viktor Dukhovni 2015-03-04 16:58:36 -05:00
  • 238392809b wincng: Remove trailing space Luke Howard 2015-02-11 20:12:53 +11:00
  • 5023f55208 Add Windows CNG (BCrypt) support to HCrypto EVP API Luke Howard 2015-02-06 16:26:08 +11:00
  • 49861eb2c5 Delay KRB5_KTNAME lookup until keytab resolution. Viktor Dukhovni 2015-02-06 23:14:52 -05:00
  • c1564e2cdb Merge pull request #119 from ktdreyer/ipv6-loopback Jeffrey Altman 2015-01-25 16:19:05 -05:00
  • 59b8f4ff84 ipv6 loopbacks fix for GNU libc getaddrinfo() Rok Papež, ARNES 2013-10-16 15:57:55 -06:00
  • ef8e4da010 only perform dir separator normalization for file paths Jeffrey Altman 2014-10-19 13:49:24 -04:00
  • b3f29170a3 hcrypto: w32crypto crypt provider handle leak Jeffrey Altman 2014-12-24 15:43:03 -05:00
  • 0e93a04c01 arcfour-hmac-md5 is weak Love Hörnquist Åstrand 2014-12-01 15:41:12 -08:00
  • 92aad0fa3d Fix kinit.1's synopsis w.r.t. -f and -F. Roland C. Dowdeswell 2014-12-01 12:40:54 -05:00
  • 5aca37ae55 revert 31be932fe8 Love Hörnquist Åstrand 2014-09-09 18:50:22 +02:00
  • a220ed39eb try using as-is name_canon_rules Love Hörnquist Åstrand 2014-09-09 18:36:57 +02:00
  • 24c8bac3b8 In all_etypes prefer des3-cbc-sha1 over arcfour-hmac-md5 Love Hörnquist Åstrand 2014-09-09 18:15:08 +02:00
  • 44ba0bcd24 no need to make chmod quiet, it supposed to be already because of \ Love Hörnquist Åstrand 2014-08-23 19:29:04 -07:00
  • c68ab04304 update (c) Love Hörnquist Åstrand 2014-08-23 19:14:10 -07:00
  • a7a6771538 merge in changes from #79 Love Hörnquist Åstrand 2014-08-23 19:08:00 -07:00
  • 394a8567fb Merge pull request #87 from jelmer/travis Love Hörnquist Åstrand 2014-08-23 19:04:05 -07:00
  • 4b0121f545 release pool when done Love Hörnquist Åstrand 2014-08-23 18:54:05 -07:00
  • d1cee9a14b now that use used up more then 16 flags and we have been using the right bit order for many years, lets stop dealing with broken bit fields from ticket flags Love Hörnquist Åstrand 2014-08-23 18:48:34 -07:00
  • f05236b202 hush autoconf Love Hörnquist Åstrand 2014-08-22 21:52:27 -07:00
  • e6ed2bc9df use LT_INIT only, fixes #95 Love Hörnquist Åstrand 2014-08-22 21:52:10 -07:00
  • c10e99bead Merge pull request #109 from cg2v/dist-kadmin-version-script Love Hörnquist Åstrand 2014-08-22 21:38:55 -07:00
  • 4569c07522 Merge pull request #110 from cg2v/anonymous-pkinit Love Hörnquist Åstrand 2014-08-22 21:35:22 -07:00
  • 42d4c2b44b Merge pull request #105 from jelmer/compatibility-symlinks Love Hörnquist Åstrand 2014-08-22 21:33:14 -07:00
  • 904324de8f Merge pull request #100 from ktdreyer/kadmin-systemd-setpgid Love Hörnquist Åstrand 2014-08-22 21:31:32 -07:00
  • 8504dce265 make quiet Love Hörnquist Åstrand 2014-08-22 21:26:15 -07:00
  • 30768c75bb make quiet Love Hörnquist Åstrand 2014-08-22 21:25:01 -07:00
  • 95f86ad1b8 remove stray a Love Hörnquist Åstrand 2014-08-22 21:23:30 -07:00
  • 0104a1c6f3 check for JSON perl module and if not found ask developer to install it Love Hörnquist Åstrand 2014-08-22 21:17:05 -07:00
  • 37afa01be3 rename roken base64, fixes #107 Love Hörnquist Åstrand 2014-08-22 20:57:24 -07:00
  • ad9cd6a138 Merge pull request #112 from jhutz/rxkad-kdf Love Hörnquist Åstrand 2014-08-22 20:21:37 -07:00
  • a84b572747 resurrect password change support again Love Hörnquist Åstrand 2014-08-22 20:19:36 -07:00
  • 9d511ea37d libkafs: derivation from non-DES key (rxkad-kdf) Jeffrey Hutzelman 2014-08-21 13:05:59 -04:00
  • 6501ba7e95 Avoid appearance of if if else ambiguity Viktor Dukhovni 2014-07-22 18:02:26 -04:00
  • d75e74b2d7 Avoid kinit NPE when default cred not in keytab Viktor Dukhovni 2014-07-21 21:00:19 +00:00
  • f79326e960 Check _kdc_db_fetch return value before dereference entry pointer Samuel Cabrero 2014-07-18 15:13:19 +02:00
  • c93db5aa52 check for sys/errno.h Love Hörnquist Åstrand 2014-06-25 21:39:33 -07:00
  • 445160aa2c Add travis config. Jelmer Vernooij 2014-04-21 22:30:33 +02:00
  • 41da16b48a version-script-client.map needs to be in dist Chaskiel Grundman 2014-07-07 12:39:49 -04:00
  • f07ee07288 Use anon realm for anonymous PKINIT Chaskiel Grundman 2014-07-07 12:35:43 -04:00
  • 217ae4315a Merge pull request #108 from ktdreyer/kadm5-make-race Love Hörnquist Åstrand 2014-07-06 23:03:55 +02:00
  • f3789f8cc5 Document logic in _krb5_is_anon_request Chaskiel Grundman 2014-07-06 14:37:49 -04:00
  • c2e2de7384 When using PKINIT with DH, compute session key Chaskiel Grundman 2014-07-02 21:00:18 -04:00
  • bf7f31ee09 Include empty PKINIT-KX padata Chaskiel Grundman 2014-07-02 20:49:16 -04:00
  • 5f2a93f5ca Recognize anonymous AS requests using bit 14 Chaskiel Grundman 2014-07-02 20:39:38 -04:00
  • 86554f5a7f Use correct value for anonymous flags Chaskiel Grundman 2014-07-02 20:24:49 -04:00
  • 6affa4ccec kadm5: fix race in Makefile with kadm5_err.h Jakub Čajka 2014-07-01 13:13:43 -06:00
  • a5da5bcb96 asn1: check overflow against SIZE_MAX not +1 Jeffrey Altman 2014-06-20 20:15:13 -04:00
  • 31be932fe8 Install compatibility symlinks for kadmin and ktutil. Jelmer Vernooij 2014-06-11 03:44:28 +02:00
  • 5fd158db47 Merge pull request #104 from jelmer/kadmin-ktutil-to-usr-bin Love Hörnquist Åstrand 2014-06-10 14:29:37 -07:00
  • 63e2f30fd5 Move kadmin and ktutil to /usr/bin. Jelmer Vernooij 2014-06-09 23:36:23 +02:00
  • 9ef790576d Merge pull request #102 from jelmer/manpages-no-krb4 Jeffrey Altman 2014-06-01 19:59:35 -04:00
  • ea062e4bb2 Remove references to KRBTKFILE from login.1 and kinit.1. Jelmer Vernooij 2014-06-02 00:32:27 +02:00
  • 5a75d6fe43 afslog.1: Remove documentation for removed no-v4 argument. Jelmer Vernooij 2014-06-02 00:30:04 +02:00
  • 0b56c1ebab Merge pull request #101 from jelmer/kimpersonate-no-kerb4 Jeffrey Altman 2014-06-01 17:35:48 -04:00
  • 7e81485562 Remove kerberos 4 references from kimpersonate.8. Jelmer Vernooij 2014-06-01 23:21:52 +02:00
  • 11c9e28192 kadmin: handle systemd setpgid failure Ken Dreyer 2014-05-31 02:00:58 -06:00
  • 684ff198b7 Merge pull request #99 from ktdreyer/klist-spelling-comments Love Hörnquist Åstrand 2014-05-28 23:40:24 +02:00