oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
Files
3b0856cab2b25624deb1f6e0e67637ba96a647ac
heimdal/kdc
History
Luke Howard 3b0856cab2 kdc: use ticket client name when signing PAC 
The principal in the PAC_LOGON_NAME buffer is expected to match the client name
in the ticket. Previously we were setting this to the canonical client name,
which would have broken PAC validation if the client did not request name
canonicalization
2021-09-23 14:39:35 +10:00
..
altsecid_gss_preauth_authorizer.c
kdc: correct logic error in altsecid_gss_preauth_authorizer
2021-08-31 11:06:32 +00:00
announce.c
cast to avoid size_t vs int issue
2011-07-24 13:07:07 -07:00
bx509d.8
bx509: Add addresses q-param for /get-tgt
2021-04-14 19:28:08 -05:00
bx509d.c
bx509d: Use /get-tgt lifetime q-param
2021-05-06 23:13:31 -05:00
ca.c
bx509d: Allow requesting longer cert lifetimes
2021-03-07 22:20:06 -06:00
cjwt_token_validator.c
Move some infra bits of lib/krb5/ to lib/base/ (2)
2020-03-02 10:56:13 -06:00
config.c
roken_detach_prep() should return fd
2019-10-03 13:09:18 -05:00
connect.c
kdc: enable keepalive mode on incoming sockets
2020-07-24 01:32:34 -04:00
csr_authorizer_plugin.h
kdc: Get KDC config out of CSR authorizer API
2020-09-08 00:25:24 -05:00
csr_authorizer.c
kdc: Get KDC config out of CSR authorizer API
2020-09-08 00:25:24 -05:00
default_config.c
kdc: support for GSS-API pre-authentication
2021-08-12 17:37:01 +10:00
digest-service.c
kdc: support for GSS-API pre-authentication
2021-08-12 17:37:01 +10:00
digest.c
kdc: map KRB5_PROG_SUMTYPE_NOSUPP to KRB5KDC_ERR_SUMTYPE_NOSUPP
2021-09-21 18:17:00 +10:00
fast.c
kdc: map KRB5_PROG_SUMTYPE_NOSUPP to KRB5KDC_ERR_SUMTYPE_NOSUPP
2021-09-21 18:17:00 +10:00
gss_preauth_authorizer_plugin.h
kdc: support for GSS-API pre-authentication
2021-08-12 17:37:01 +10:00
gss_preauth.c
kdc: map KRB5_PROG_SUMTYPE_NOSUPP to KRB5KDC_ERR_SUMTYPE_NOSUPP
2021-09-21 18:17:00 +10:00
headers.h
kdc: support for GSS-API pre-authentication
2021-08-12 17:37:01 +10:00
hprop-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hprop.8
Fixes #550 - Note that encrypt is the default option
2019-05-30 20:10:25 -04:00
hprop.c
add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping
2013-10-15 12:40:39 +02:00
hprop.h
add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping
2013-10-15 12:40:39 +02:00
hpropd-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hpropd.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
hpropd.c
hpropd: enable keepalive mode on incoming sockets
2020-07-24 01:32:34 -04:00
httpkadmind.8
httpkadmind: Allow host SPNs to fetch selves
2021-06-29 14:52:07 -05:00
httpkadmind.c
httpkadmind: Allow host SPNs to fetch selves
2021-06-29 14:52:07 -05:00
ipc_csr_authorizer.c
kdc: Get KDC config out of CSR authorizer API
2020-09-08 00:25:24 -05:00
kdc_locl.h
kdc: support for GSS-API pre-authentication
2021-08-12 17:37:01 +10:00
kdc-replay.c
Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.
2012-02-20 19:45:41 +00:00
kdc-tester.c
MacOS/X fixes
2016-06-09 01:13:14 -04:00
kdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kdc.8
Optional backwards-compatible anon-pkinit behaviour
2019-09-04 18:00:15 -04:00
kdc.h
kdc: support for GSS-API pre-authentication
2021-08-12 17:37:01 +10:00
kerberos5.c
kdc: use ticket client name when signing PAC
2021-09-23 14:39:35 +10:00
krb5tgs.c
kdc: map KRB5_PROG_SUMTYPE_NOSUPP to KRB5KDC_ERR_SUMTYPE_NOSUPP
2021-09-21 18:17:00 +10:00
kstash-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kstash.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kstash.c
libhcrypto: UI_UTIL_FLAG_VERIFY_SILENT
2018-12-30 15:39:49 -06:00
kx509.c
bx509d: Allow requesting longer cert lifetimes
2021-03-07 22:20:06 -06:00
libkdc-exports.def
kdc: Modernize kx509 logging too
2019-12-11 19:34:36 -06:00
libkdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
log.c
Declare kdc log functions to be printf-like
2019-07-09 13:17:06 -05:00
main.c
kdc: Fix leaks
2019-12-09 21:39:30 -06:00
Makefile.am
kdc: add sample GSS preauth authorization plugin
2021-08-31 11:00:13 +00:00
misc.c
kdc: Fix warnings for synthetic principals
2021-06-29 17:02:17 -05:00
mit_dump.c
Handle long lines in dump files
2017-10-11 17:13:07 -05:00
negotiate_token_validator.c
kdc: support for GSS-API pre-authentication
2021-08-12 17:37:01 +10:00
NTMakefile
gss: move GSS pre-auth helpers to convenience lib
2021-08-27 15:20:07 +10:00
pkinit-ec.c
fixup pkinit-ec.c (kdc and lib/krb5) includes
2016-04-17 17:10:08 -05:00
pkinit.c
kdc: avoid re-encoding KDC-REQ-BODY
2021-09-13 13:50:45 +10:00
process.c
kdc: Fix _kdc_audit_addaddrs() buglet
2021-06-21 23:38:16 -05:00
rx.h
remove trailing whitespace
2008-09-13 09:21:03 +00:00
set_dbinfo.c
Define log levels in docs and change default to 0-3.
2019-10-21 13:43:01 +01:00
simple_csr_authorizer.c
bx509: Let simple authorizer use the app name
2020-09-08 00:25:24 -05:00
string2key-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
string2key.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
string2key.c
catch error value from krb5_ functions and exit
2013-06-28 08:40:49 +02:00
test_csr_authorizer.c
hx509/kdc: Move KDC CA utility function into hx509
2020-09-08 00:25:24 -05:00
test_kdc_ca.c
bx509d: Allow requesting longer cert lifetimes
2021-03-07 22:20:06 -06:00
test_token_validator.c
hx509/kdc: Move KDC CA utility function into hx509
2020-09-08 00:25:24 -05:00
token_validator_plugin.h
Add bx509d
2019-12-04 21:34:44 -06:00
token_validator.c
Move some infra bits of lib/krb5/ to lib/base/ (2)
2020-03-02 10:56:13 -06:00
version-script.map
kdc: Modernize kx509 logging too
2019-12-11 19:34:36 -06:00
windc_plugin.h
kdc: sign ticket using Windows PAC
2021-09-19 13:25:27 +10:00
windc.c
kdc: sign ticket using Windows PAC
2021-09-19 13:25:27 +10:00