Nicolas Williams 12cd2c9cbd Fix TGS ticket enc-part key selection ...

When I added support for configuring how the KDC selects session,
    reply, and ticket enc-part keys I accidentally had the KDC use the
    session key selection algorithm for selecting the ticket enc-part
    key.  This becomes a problem when using a Heimdal KDC with an MIT
    KDB as the HDB backend and when the krbtgt keys are not in
    strongest-to-weakest order, in which case forwardable tickets minted
    by the Heimdal KDC will not be accepted by MIT KDCs with the same
    KDB.

2011-10-11 23:57:58 -05:00

..

announce.c

cast to avoid size_t vs int issue

2011-07-24 13:07:07 -07:00

config.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

connect.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

default_config.c

switch to use use_strongest_server_key

2011-07-24 10:33:28 -07:00

digest-service.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

digest.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

headers.h

Ensure data structures allocated by hprop are initialized

2010-02-02 20:43:48 -08:00

hprop-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hprop.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hprop.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hprop.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

hpropd-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hpropd.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hpropd.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kdc_locl.h

bonjour_announce

2009-11-22 00:26:57 -08:00

kdc-replay.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kdc.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kdc.h

This patch adds support for a use-strongest-server-key krb5.conf kdc parameter that controls how the KDC (AS and TGS) selects a long-term key from a service principal's HDB entry. If TRUE the KDC picks the strongest supported key from the service principal's current keyset. If FALSE the KDC picks the first supported key from the service principal's current keyset.

2011-06-14 20:35:19 -07:00

kerberos5.c

kdc: pass down HDB_F_FOR_AS_REQ and HDB_F_FOR_TGS_REQ to the hdb layer

2011-07-30 11:56:46 -07:00

krb5tgs.c

Fix TGS ticket enc-part key selection

2011-10-11 23:57:58 -05:00

kstash-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kstash.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kstash.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kx509.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

libkdc-exports.def

Windows: Fix export lists

2010-11-29 10:53:49 -05:00

libkdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

log.c

Warning fixes from Christos Zoulas

2011-04-29 20:25:05 -07:00

main.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

Makefile.am

no more krb4

2011-08-10 09:24:43 -07:00

misc.c

KVNOs are krb5uint32 in RFC4120, make it so

2011-07-24 14:23:45 -07:00

mit_dump.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

NTMakefile

drop unused KRB4 bits

2011-07-30 14:14:52 -07:00

pkinit.c

compiler warning

2011-07-24 19:56:09 -07:00

process.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

rx.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

set_dbinfo.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

string2key.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

version-script.map

add _kdc_db_fetch and _kdc_free_ent for digest-service

2011-01-30 12:12:30 -08:00

windc_plugin.h

kdc: pass down the delegated_proxy_principal to the verify_pac() function

2011-07-23 11:48:11 -07:00

windc.c

kdc: pass down the delegated_proxy_principal to the verify_pac() function

2011-07-23 11:48:11 -07:00