Luke Howard 63557427e0 kdc: allow anonymous AS requests with long-term keys ...

RFC8062 section 4.1 allows clients with long-term KDC keys to set the anonymous
flag; in this case their identity is authenticated but the returned ticket
contains the anonymous principal name as the client name.

kdc: allow authenticated anonymous PKINIT

The KDC PKINIT code conflated the checks for authenticated and unauthenticated
anonymous by only looking at the anonymous KDC request option.

2019-05-14 15:16:19 -04:00

..

announce.c

cast to avoid size_t vs int issue

2011-07-24 13:07:07 -07:00

config.c

kdc: add --testing option for leak testing

2016-12-06 22:44:23 -06:00

connect.c

Further improve kdc child process management

2017-10-30 18:39:23 -04:00

default_config.c

Make kdc name type strictness configurable

2016-11-14 21:29:47 -06:00

digest-service.c

KCM: restore support for Solaris doors IPC mechanism (#379)

2018-05-13 15:31:13 +10:00

digest.c

Fix warnings (clang 3.6)

2016-02-26 01:04:31 -06:00

fast.c

Hide principal names in errors with FAST

2017-12-05 19:01:04 -05:00

headers.h

Fix Windows build: no fork for kdc

2016-01-20 15:03:30 -06:00

hprop-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hprop.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hprop.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

hprop.h

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

hpropd-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hpropd.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hpropd.c

include field separators in comparison

2017-04-29 01:05:59 -04:00

kdc_locl.h

kdc: add --testing option for leak testing

2016-12-06 22:44:23 -06:00

kdc-replay.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

kdc-tester.c

MacOS/X fixes

2016-06-09 01:13:14 -04:00

kdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kdc.8

kdc.8: Remove references to kerberos 4.

2014-04-28 01:02:45 +02:00

kdc.h

Make kdc name type strictness configurable

2016-11-14 21:29:47 -06:00

kerberos5.c

kdc: allow anonymous AS requests with long-term keys

2019-05-14 15:16:19 -04:00

krb5tgs.c

kdc: omit default salt from PA-ETYPE-INFO[2]

2019-01-07 16:33:08 +11:00

kstash-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kstash.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kstash.c

libhcrypto: UI_UTIL_FLAG_VERIFY_SILENT

2018-12-30 15:39:49 -06:00

kx509.c

kdc: fix kx509 service principal match

2017-01-27 00:37:08 -05:00

libkdc-exports.def

kdc: export kdc_get_instance() for windc plugins

2019-01-05 10:48:04 +11:00

libkdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

log.c

Error/warning cleanups for clang (LLVM)

2011-11-28 14:42:06 -06:00

main.c

Avoid interposing pidfile(), use rk_pidfile() instead

2016-12-19 19:10:49 -05:00

Makefile.am

Merge pull request #171 from jelmer/parallel

2016-05-14 22:28:25 +12:00

misc.c

Make kdc name type strictness configurable

2016-11-14 21:29:47 -06:00

mit_dump.c

Handle long lines in dump files

2017-10-11 17:13:07 -05:00

NTMakefile

Make OpenSSL an hcrypto backend proper

2016-04-15 00:16:17 -05:00

pkinit-ec.c

fixup pkinit-ec.c (kdc and lib/krb5) includes

2016-04-17 17:10:08 -05:00

pkinit.c

kdc: allow anonymous AS requests with long-term keys

2019-05-14 15:16:19 -04:00

process.c

release pool when done

2014-08-23 18:54:05 -07:00

rx.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

set_dbinfo.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

string2key.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key.c

catch error value from krb5_ functions and exit

2013-06-28 08:40:49 +02:00

version-script.map

kdc: export kdc_get_instance() for windc plugins

2019-01-05 10:48:04 +11:00

windc_plugin.h

change client access message

2011-07-24 20:24:35 -07:00

windc.c

WIN32: fix calling conventions for 32-bit builds

2019-01-14 06:12:36 -05:00