oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
Files
2c031ca78c52d4acc02e31a6349e2bf2543eeb0a
heimdal/kdc
History
Stefan Metzmacher 2c031ca78c kdc: let check_PAC() to verify the incoming server and krbtgt cheksums 
For a normal TGS-REQ they're both signed with krbtgt key.
But for S4U2Proxy requests which ask for contrained delegation,
the keys differ.

metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-06-19 10:26:11 -07:00
..
announce.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
config.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
connect.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
default_config.c
Set improved enctypes parameter defaults to better match the RFC.
2011-06-14 20:35:19 -07:00
digest-service.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
digest.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
headers.h
Ensure data structures allocated by hprop are initialized
2010-02-02 20:43:48 -08:00
hprop-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hprop.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
hprop.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
hprop.h
remove trailing whitespace
2008-09-13 09:21:03 +00:00
hpropd-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hpropd.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
hpropd.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kdc_locl.h
bonjour_announce
2009-11-22 00:26:57 -08:00
kdc-replay.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kdc.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kdc.h
This patch adds support for a use-strongest-server-key krb5.conf kdc parameter that controls how the KDC (AS and TGS) selects a long-term key from a service principal's HDB entry. If TRUE the KDC picks the strongest supported key from the service principal's current keyset. If FALSE the KDC picks the first supported key from the service principal's current keyset.
2011-06-14 20:35:19 -07:00
kerberos5.c
add missing space in log message
2011-06-14 22:00:25 -07:00
krb5tgs.c
kdc: let check_PAC() to verify the incoming server and krbtgt cheksums
2011-06-19 10:26:11 -07:00
kstash-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kstash.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kstash.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kx509.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
libkdc-exports.def
Windows: Fix export lists
2010-11-29 10:53:49 -05:00
libkdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
log.c
Warning fixes from Christos Zoulas
2011-04-29 20:25:05 -07:00
main.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
Makefile.am
link with libheimntlm.la
2011-04-14 12:54:15 -07:00
misc.c
Fixes to patches that add *use-strong* parameters.
2011-06-14 20:35:19 -07:00
mit_dump.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
NTMakefile
Windows: Don't build kaserver
2010-11-24 15:33:25 -05:00
pkinit.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
process.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
rx.h
remove trailing whitespace
2008-09-13 09:21:03 +00:00
set_dbinfo.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
string2key-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
string2key.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
string2key.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
version-script.map
add _kdc_db_fetch and _kdc_free_ent for digest-service
2011-01-30 12:12:30 -08:00
windc_plugin.h
remove trailing whitespace
2011-05-21 11:57:31 -07:00
windc.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00