oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
Files
aabb937b46846922f70c2dc4cb95521d15f70764
heimdal/kdc
History
Stefan Metzmacher aabb937b46 kdc: don't allow self delegation if a backend check_constrained_delegation() hook is given 
A service should use S4U2Self instead of S4U2Proxy.

Windows servers allow S4U2Proxy only to explicitly configured
target principals.

metze

Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
2011-07-23 11:48:11 -07:00
..
announce.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
config.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
connect.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
default_config.c
Set improved enctypes parameter defaults to better match the RFC.
2011-06-14 20:35:19 -07:00
digest-service.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
digest.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
headers.h
Ensure data structures allocated by hprop are initialized
2010-02-02 20:43:48 -08:00
hprop-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hprop.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
hprop.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
hprop.h
remove trailing whitespace
2008-09-13 09:21:03 +00:00
hpropd-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hpropd.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
hpropd.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kdc_locl.h
bonjour_announce
2009-11-22 00:26:57 -08:00
kdc-replay.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kdc.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kdc.h
This patch adds support for a use-strongest-server-key krb5.conf kdc parameter that controls how the KDC (AS and TGS) selects a long-term key from a service principal's HDB entry. If TRUE the KDC picks the strongest supported key from the service principal's current keyset. If FALSE the KDC picks the first supported key from the service principal's current keyset.
2011-06-14 20:35:19 -07:00
kerberos5.c
add missing space in log message
2011-06-14 22:00:25 -07:00
krb5tgs.c
kdc: don't allow self delegation if a backend check_constrained_delegation() hook is given
2011-07-23 11:48:11 -07:00
kstash-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kstash.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kstash.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kx509.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
libkdc-exports.def
Windows: Fix export lists
2010-11-29 10:53:49 -05:00
libkdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
log.c
Warning fixes from Christos Zoulas
2011-04-29 20:25:05 -07:00
main.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
Makefile.am
sprinkle more windows files
2011-07-23 11:18:21 -07:00
misc.c
Fixes to patches that add *use-strong* parameters.
2011-06-14 20:35:19 -07:00
mit_dump.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
NTMakefile
Windows: Don't build kaserver
2010-11-24 15:33:25 -05:00
pkinit.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
process.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
rx.h
remove trailing whitespace
2008-09-13 09:21:03 +00:00
set_dbinfo.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
string2key-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
string2key.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
string2key.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
version-script.map
add _kdc_db_fetch and _kdc_free_ent for digest-service
2011-01-30 12:12:30 -08:00
windc_plugin.h
remove trailing whitespace
2011-05-21 11:57:31 -07:00
windc.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00