Nicolas Williams 5ace5f5a6a gss: Fix dst TGT deleg w/o dns_lookup_realm
Setting `dns_lookup_realm = false` in `[libdefaults]` and setting name
canon rules that force the empty realm causes destination-TGT delegation
to break because the client doesn't know the service's realm.

Because MIT and Heimdal check that the (unauthenticated plaintext)
sname/realm of the Ticket in the KDC reply matches the sname/srealm in
the enc-part of the KDC reply, we know we can trust the realm of the
ticket found in the ccache.  So use that.
2021-12-06 17:39:22 -06:00
2021-04-20 12:01:54 -05:00
2021-11-30 11:42:00 -05:00
2021-11-29 10:26:19 -05:00
2021-11-29 12:50:26 +11:00
2020-04-15 19:05:21 -05:00
2004-02-12 14:19:16 +00:00
2021-09-10 09:10:42 +10:00
2000-06-07 10:01:25 +00:00
2002-08-21 13:29:08 +00:00
2019-06-07 22:03:05 -04:00
2014-08-23 19:14:10 -07:00
2017-09-29 12:37:30 -05:00
2017-04-13 18:06:39 -05:00
2019-11-20 18:14:44 -05:00
2020-06-26 11:29:15 -04:00
2011-07-24 22:45:55 -07:00
2020-06-26 11:30:48 -04:00
2019-06-09 13:43:47 -04:00
2010-01-05 19:21:45 +01:00

Travis-CI build (Linux, OS X) Appveyor-CI build (Windows) Coverage Status

Heimdal

Heimdal is an implementation of:

  • ASN.1/DER,
  • PKIX, and
  • Kerberos.

For information how to install see here.

There are man pages for most of the commands.

Bug reports and bugs are appreciated. Use GitHub issues.

For more information see the project homepage https://heimdal.software/heimdal/ or the mailing lists:

heimdal-announce@heimdal.software low-volume announcement heimdal-discuss@heimdal.software high-volume discussion

send mail to heimdal-announce-subscribe@heimdal.software and heimdal-discuss-subscribe@heimdal.software respectively to subscribe.

Build Status

Travis-CI build (Linux, OS X) Appveyor-CI build (Windows)

Languages
C 92.1%
Roff 2.8%
Shell 2.3%
Makefile 0.7%
M4 0.5%
Other 1.4%