Love Hörnquist Åstrand 937df31de8 Select a session enctype from the list of the crypto systems supported ...

enctype, is supported by the client and is one of the enctype of the
enctype of the krbtgt.

The later is used as a hint what enctype all KDC are supporting to
make sure a newer version of KDC wont generate a session enctype that
and older version of a KDC in the same realm can't decrypt.

But if the KDC admin is paranoid and doesn't want to have "no the
best" enctypes on the krbtgt, lets save the best pick from the client
list and hope that that will work for any other KDCs.

Reported by metze.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20271 ec53bebd-3082-4978-b11e-865c3cabbd6b

2007-02-22 01:21:46 +00:00

..

.cvsignore

ignore kdc-protos.h and kdc-private.h

2006-10-20 20:42:43 +00:00

524.c

Adapt to signature change of _krb5_principalname2krb5_principal.

2006-10-06 17:06:30 +00:00

config.c

Parse kx509/kca configuration.

2007-01-14 23:12:51 +00:00

connect.c

Listen to 9878 if kca is turned on.

2006-12-28 21:09:00 +00:00

default_config.c

(krb5_kdc_default_config): default to all bits set to zero.

2006-08-24 08:52:53 +00:00

digest.c

Remove debug output.

2007-02-03 07:06:24 +00:00

headers.h

Maybe include <sys/wait.h>.

2007-01-04 00:15:34 +00:00

hprop.8

use keeps around options, from OpenBSD

2004-12-08 17:36:18 +00:00

hprop.c

(propagate_database): on any failure, drop the connection to the peer

2007-02-21 20:48:40 +00:00

hprop.h

Wrap hdb_entry with hdb_entry_ex, patch originally from Andrew Bartlet

2005-12-12 12:40:12 +00:00

hpropd.8

spelling, from OpenBSD

2004-12-10 09:44:05 +00:00

hpropd.c

Remove support dumping to a kerberos 4 database.

2006-11-08 18:48:36 +00:00

kadb.h

(ka_entry): fix name pw_end -> valid_end. add some more fields

2000-03-03 12:36:26 +00:00

kaserver.c

Change _kdc_db_fetch() to return the database pointer too if needed by

2006-08-23 11:45:16 +00:00

kdc_locl.h

Prefix internal symbol with _kdc_.

2006-12-26 17:18:14 +00:00

kdc.8

document max-kdc-datagram-reply-length

2006-10-12 10:05:57 +00:00

kdc.h

add kx509 config

2007-01-14 23:10:24 +00:00

kerberos4.c

Adapt to signature change of _krb5_principalname2krb5_principal.

2006-10-08 13:43:52 +00:00

kerberos5.c

Select a session enctype from the list of the crypto systems supported

2007-02-22 01:21:46 +00:00

krb5tgs.c

Only check service key for cross realm PACs.

2007-02-18 08:34:36 +00:00

kstash.8

add --random-key

2004-12-09 12:15:20 +00:00

kstash.c

s/random_key/random_key_flag/, From Dave Love <d.love@dl.ac.uk>

2005-01-17 13:40:08 +00:00

kx509.c

Don't use C99 syntax.

2007-01-20 09:06:18 +00:00

log.c

Don't pollute namespace, generate public headerfile

2005-06-30 01:54:49 +00:00

main.c

(sigterm): don't _exit, let loop() catch the signal instead.

2006-09-16 17:28:05 +00:00

Makefile.am

Include windc.c and use windc_plugin.h

2007-01-03 15:38:44 +00:00

misc.c

indent.

2006-08-28 14:41:49 +00:00

mit_dump.c

(mit_prop_dump): close fd when done processing

2006-04-07 18:53:45 +00:00

pkinit.c

pass extra flags for detached signatures.

2007-02-03 22:47:25 +00:00

process.c

Handle kx509 requests.

2006-12-28 21:09:35 +00:00

rx.h

Rename u_intXX_t to uintXX_t

2006-05-05 10:52:01 +00:00

string2key.8

add copyright/license statment

2003-02-16 21:10:32 +00:00

string2key.c

Use strcspn to remove \n from fgets result. Prompted by change by Ray

2006-12-04 23:36:36 +00:00

v4_dump.c

(v4_prop_dump): close FILE handle f when done.

2006-04-09 17:41:47 +00:00

windc_plugin.h

indent.

2007-01-10 15:24:51 +00:00

windc.c

Spelling.

2007-01-10 15:25:09 +00:00