oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
Files
27cdf81995634434a4fdfeaa9f416d4519b508f1
heimdal/kdc
History
Nicolas Williams 27cdf81995 kdc: Honor no-auth-data-reqd on cross-real TGTs 
Nowadays we use PACs instead of AD-SIGNEDPATH, so we want a PAC on every
TGT, but we don't necessarily want PACs on cross-realm TGTs.

Specifically, we don't interop well yet with AD when issuing cross-realm
TGTs with AD realms as the destination realm (see #1091).
2023-06-23 13:44:13 -05:00
..
altsecid_gss_preauth_authorizer.c
gss: remove gss_get_instance()
2022-01-30 14:20:05 -05:00
announce.c
cast to avoid size_t vs int issue
2011-07-24 13:07:07 -07:00
bx509d.8
bx509d: Add /get-tgts batch end-point
2022-10-02 22:46:37 -05:00
bx509d.c
Fix ctype.h misuse.
2023-05-26 14:10:11 -05:00
ca.c
kdc: kdc_issue_certificate remove dead code
2022-01-17 22:41:33 -05:00
cjwt_token_validator.c
bx509d: Fix warnings
2022-01-14 17:59:49 -06:00
config.c
kcm,kdc/config.c: detect too big max_request sizes (>= 64 MB)
2023-06-20 12:57:28 -05:00
connect.c
kdc: Do not announce via Bonjour when testing
2022-01-20 00:20:30 -06:00
csr_authorizer_plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
csr_authorizer.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
default_config.c
kdc: add enable_fast option (enabled by default)
2022-09-25 21:13:01 +10:00
digest-service.c
Use constant-time memcmp when comparing sensitive buffers
2022-04-30 13:35:52 -04:00
digest.c
Use constant-time memcmp when comparing sensitive buffers
2022-04-30 13:35:52 -04:00
fast.c
kdc: Don’t abort if krb5_generate_random_keyblock() fails
2023-06-20 18:02:15 -05:00
gss_preauth_authorizer_plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
gss_preauth.c
heimdal: Fix the 32-bit build on FreeBSD
2022-11-16 23:46:46 -05:00
headers.h
kdc: move auth event definitions into KDC header
2022-01-13 14:51:31 +11:00
hprop-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hprop.8
kdc: remove unused v4 hprop code
2021-12-30 20:42:18 +11:00
hprop.c
kdc: hprop propagate_database do not leak 'server'
2022-01-23 22:25:43 -05:00
hprop.h
hdb: eliminate hdb_entry_ex
2022-01-15 18:54:57 +11:00
hpropd-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hpropd.8
kdc: remove unused v4 hprop code
2021-12-30 20:42:18 +11:00
hpropd.c
hpropd: Fix use-after-free? (WIP)
2023-01-04 01:36:02 -06:00
httpkadmind.8
httpkadmind: Make more like bx509d internally
2022-10-02 22:46:37 -05:00
httpkadmind.c
httpkadmind: If early ENOMEM, close the connection
2023-01-04 16:24:55 -06:00
ipc_csr_authorizer.c
Fix ctype.h misuse.
2023-05-26 14:10:11 -05:00
kdc_locl.h
kdc: add enable_fast option (enabled by default)
2022-09-25 21:13:01 +10:00
kdc-accessors.h
kdc: provide kdc_request_get_explicit_armor_{clientdb,client,pac}()
2022-03-03 10:10:29 +11:00
kdc-audit.h
kdc: add wrappers for heimbase object accessors
2022-01-28 17:24:57 -06:00
kdc-plugin.c
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00
kdc-plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
kdc-replay.c
kdc: Fix warnings
2022-01-14 17:59:49 -06:00
kdc-tester.c
kdc: Quiet set-but-not-use variable warning in kdc-tester
2023-01-04 01:36:01 -06:00
kdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kdc.8
Optional backwards-compatible anon-pkinit behaviour
2019-09-04 18:00:15 -04:00
kdc.h
kdc: add wrappers for heimbase object accessors
2022-01-28 17:24:57 -06:00
kerberos5.c
kdc: Overwrite ‘error_code’ only if we have an actual error
2023-06-20 18:02:15 -05:00
krb5tgs.c
kdc: Overwrite ‘error_code’ only if we have an actual error
2023-06-20 18:02:15 -05:00
kstash-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kstash.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kstash.c
kstash: Fix warning
2022-01-14 17:54:55 -06:00
kx509.c
kdc: make auditing API public
2022-01-18 16:09:50 +11:00
libkdc-exports.def
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00
libkdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
log.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
main.c
kdc: Fix leaks
2019-12-09 21:39:30 -06:00
Makefile.am
bx509d: Add test of IPC CSR authorizer
2022-12-15 17:44:41 -06:00
misc.c
kdc: Honor no-auth-data-reqd on cross-real TGTs
2023-06-23 13:44:13 -05:00
mit_dump.c
kdc: Quiet set-but-not-use variable warning in HDB dump code
2023-01-04 01:36:02 -06:00
mssfu.c
kdc: Remove trailing space from log message
2023-06-20 18:02:15 -05:00
negotiate_token_validator.c
gss: remove gss_get_instance()
2022-01-30 14:20:05 -05:00
NTMakefile
kdc: add accessor functions for KDC request structure
2022-01-20 17:23:24 +11:00
pkinit-ec.c
kdc: OpenSSL 3.0 support
2022-11-22 11:34:54 -05:00
pkinit.c
kdc: Fix missing space in log messages
2023-06-20 18:02:15 -05:00
process.c
kdc: Add error symbols for error logging
2022-03-16 15:04:10 -05:00
set_dbinfo.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
string2key-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
string2key.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
string2key.c
remove (krb5_enctype) cast for ETYPE_xxx
2022-01-15 22:05:50 -05:00
test_csr_authorizer.c
Fix ctype.h misuse.
2023-05-26 14:10:11 -05:00
test_kdc_ca.c
bx509d: Fix warnings
2022-01-14 17:59:49 -06:00
test_token_validator.c
test_token_validator: Quiet set-but-not-use variable warning
2023-01-04 01:36:02 -06:00
token_validator_plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
token_validator.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
version-script.map
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00