Roland C. Dowdeswell e3a59b65d3 kadmin: generate stronger random passwords ...

Generate 12 random bytes and encode them with Heimdal base64url, producing
16-character random passwords with 96 bits of entropy.

This avoids punctuation and quoting issues while still raising generated
password entropy substantially from the old roughly 55-bit generator.

Fixes #1145

2026-05-27 12:06:14 -05:00

..

fuzz

kadmind: Add fuzz mode and fuzz corpus

2026-01-18 19:06:16 -06:00

add_enctype.c

kadmin: Fix warnings

2022-01-14 14:59:02 -06:00

add-random-users.c

kadmin: read_words pass correct type to sizeof

2022-01-17 22:36:29 -05:00

ank.c

Use OpenSSL 3.x _only_ and implement RFC 8636

2026-01-18 19:06:16 -06:00

ChangeLog

switch to utf8 encoding of all files

2008-09-13 08:53:55 +00:00

check.c

kadmin/check: move error messages to stderr

2023-06-20 13:16:19 -05:00

cpw.c

Use OpenSSL 3.x _only_ and implement RFC 8636

2026-01-18 19:06:16 -06:00

del_enctype.c

kadmin: del_enctype check for bogus keys

2015-03-14 16:08:39 -04:00

del.c

kadmin: Fix re-entrance in iterations (part 2)

2022-03-24 14:58:10 -05:00

dump.c

Add support for writing to KDB and dumping HDB to MIT KDB dump format

2012-05-03 14:24:18 -05:00

ext.c

kadmin: Fix ext_keytab leak

2026-01-18 16:09:31 -06:00

FUZZING.md

kadmind: Add fuzz mode and fuzz corpus

2026-01-18 19:06:16 -06:00

get.c

kadmin: Fix return value non-checking in format_field()

2023-01-04 16:22:41 -06:00

init.c

kadmin: Add missing error check in init()

2022-01-18 15:41:43 -06:00

kadm_conn.c

Use AI_NUMERICSERV if block_dns, and use local getaddrinfo to audit.

2024-01-09 16:06:32 -06:00

kadmin_locl.h

kadmind: Add fuzz mode and fuzz corpus

2026-01-18 19:06:16 -06:00

kadmin-commands.in

kadmin: Add missing options to kadmin(1) page (fix #1118)

2023-05-26 23:52:24 -05:00

kadmin-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kadmin.1

kadmin: Update kadmin(1) man page

2026-01-18 16:09:31 -06:00

kadmin.c

Use OpenSSL 3.x _only_ and implement RFC 8636

2026-01-18 19:06:16 -06:00

kadmind-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kadmind.8

Fixes #532 - Note that all does not include get-keys

2019-05-30 20:11:03 -04:00

kadmind.c

Sprinkle const and rk_UNCONST throughout the tests.

2026-01-18 19:06:17 -06:00

load.c

kadmin: Make maximum ticket lifetime and renew time signed integers

2026-01-22 11:39:05 -06:00

Makefile.am

kadmin: generate stronger random passwords

2026-05-27 12:06:14 -05:00

mod.c

kadmin: Fix uninit variable in add_kvno_diff()

2023-01-04 01:48:34 -06:00

NTMakefile

windows: Do not make test in kadmin/

2022-10-03 09:44:22 -05:00

prune.c

kadmin selective prune of historic key for principal

2018-12-31 14:17:10 -06:00

pw_quality.c

drop RCSID

2010-03-16 12:52:58 -07:00

random_password.c

kadmin: generate stronger random passwords

2026-05-27 12:06:14 -05:00

rename.c

drop RCSID

2010-03-16 12:52:58 -07:00

rpc.c

kadmind: Add -A option for async HDB writes

2026-01-18 16:09:31 -06:00

server.c

kadmind: Fix NULL ptr derefs found by fuzzing

2026-01-18 19:06:16 -06:00

stash.c

Use OpenSSL 3.x _only_ and implement RFC 8636

2026-01-18 19:06:16 -06:00

test_util.c

kadmin: generate stronger random passwords

2026-05-27 12:06:14 -05:00

util.c

kadmin: Add auth-data-reqd attribute

2023-06-23 13:44:13 -05:00