oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
Files
ae527bf97c8104679be79d04200ae53f8e6b1595
heimdal/kdc
History
Nicolas Williams ae527bf97c bx509d: Add /get-tgts batch end-point 
In order to support batch jobs systems that run many users' jobs and
which jobs need credentials, we add a /get-tgts end-point that is a
batched version of the /get-tgt end-point.  This end-point returns JSON.

Also, we make GETs optional, default to not-allowed in preference of
POSTs.

We also correct handling of POST (before POSTs with non-zero-length bodies
would cause the server to close the connection), and add additional CSRF
protection features, including the ability to disable all GET requests
for /get-keys and /get-config.
2022-10-02 22:46:37 -05:00
..
altsecid_gss_preauth_authorizer.c
gss: remove gss_get_instance()
2022-01-30 14:20:05 -05:00
announce.c
cast to avoid size_t vs int issue
2011-07-24 13:07:07 -07:00
bx509d.8
bx509d: Add /get-tgts batch end-point
2022-10-02 22:46:37 -05:00
bx509d.c
bx509d: Add /get-tgts batch end-point
2022-10-02 22:46:37 -05:00
ca.c
kdc: kdc_issue_certificate remove dead code
2022-01-17 22:41:33 -05:00
cjwt_token_validator.c
bx509d: Fix warnings
2022-01-14 17:59:49 -06:00
config.c
kdc: rename windc to kdc plugin
2022-01-03 16:17:01 +11:00
connect.c
kdc: Do not announce via Bonjour when testing
2022-01-20 00:20:30 -06:00
csr_authorizer_plugin.h
kdc: Get KDC config out of CSR authorizer API
2020-09-08 00:25:24 -05:00
csr_authorizer.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
default_config.c
kdc: add enable_fast option (enabled by default)
2022-09-25 21:13:01 +10:00
digest-service.c
Use constant-time memcmp when comparing sensitive buffers
2022-04-30 13:35:52 -04:00
digest.c
Use constant-time memcmp when comparing sensitive buffers
2022-04-30 13:35:52 -04:00
fast.c
kdc: add enable_fast option (enabled by default)
2022-09-25 21:13:01 +10:00
gss_preauth_authorizer_plugin.h
kdc: use attribute dictionary in altsec authorizer plugin
2022-01-04 12:27:43 +11:00
gss_preauth.c
more dealloc functions require HEIM_CALLCONV
2022-01-29 00:15:59 -05:00
headers.h
kdc: move auth event definitions into KDC header
2022-01-13 14:51:31 +11:00
hprop-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hprop.8
kdc: remove unused v4 hprop code
2021-12-30 20:42:18 +11:00
hprop.c
kdc: hprop propagate_database do not leak 'server'
2022-01-23 22:25:43 -05:00
hprop.h
hdb: eliminate hdb_entry_ex
2022-01-15 18:54:57 +11:00
hpropd-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hpropd.8
kdc: remove unused v4 hprop code
2021-12-30 20:42:18 +11:00
hpropd.c
hdb: eliminate hdb_entry_ex
2022-01-15 18:54:57 +11:00
httpkadmind.8
httpkadmind: Clarify namespace in man page
2022-04-26 17:54:12 -05:00
httpkadmind.c
httpkadmind: Enable materialization
2022-04-25 22:24:52 -05:00
ipc_csr_authorizer.c
kdc: cmd_append fix broken commit
2022-01-17 22:36:29 -05:00
kdc_locl.h
kdc: add enable_fast option (enabled by default)
2022-09-25 21:13:01 +10:00
kdc-accessors.h
kdc: provide kdc_request_get_explicit_armor_{clientdb,client,pac}()
2022-03-03 10:10:29 +11:00
kdc-audit.h
kdc: add wrappers for heimbase object accessors
2022-01-28 17:24:57 -06:00
kdc-plugin.c
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00
kdc-plugin.h
kdc-plugin: also pass astgs_request_t to the pac related functions
2022-03-03 09:58:48 +11:00
kdc-replay.c
kdc: Fix warnings
2022-01-14 17:59:49 -06:00
kdc-tester.c
kdc: sync KDC FAST with Heimdal-597.121.1
2021-12-14 09:03:42 +11:00
kdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kdc.8
Optional backwards-compatible anon-pkinit behaviour
2019-09-04 18:00:15 -04:00
kdc.h
kdc: add wrappers for heimbase object accessors
2022-01-28 17:24:57 -06:00
kerberos5.c
kdc: allow audit plugins to influence return code
2022-03-03 10:10:37 +11:00
krb5tgs.c
kdc: add enable_fast option (enabled by default)
2022-09-25 21:13:01 +10:00
kstash-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kstash.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kstash.c
kstash: Fix warning
2022-01-14 17:54:55 -06:00
kx509.c
kdc: make auditing API public
2022-01-18 16:09:50 +11:00
libkdc-exports.def
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00
libkdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
log.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
main.c
kdc: Fix leaks
2019-12-09 21:39:30 -06:00
Makefile.am
bx509d: Add /get-tgts batch end-point
2022-10-02 22:46:37 -05:00
misc.c
kdc: Fix ENOMEM path null deref (synthetic princs)
2022-01-17 12:20:15 -06:00
mit_dump.c
hdb: eliminate hdb_entry_ex
2022-01-15 18:54:57 +11:00
mssfu.c
kdc-plugin: also pass astgs_request_t to the pac related functions
2022-03-03 09:58:48 +11:00
negotiate_token_validator.c
gss: remove gss_get_instance()
2022-01-30 14:20:05 -05:00
NTMakefile
kdc: add accessor functions for KDC request structure
2022-01-20 17:23:24 +11:00
pkinit-ec.c
fixup pkinit-ec.c (kdc and lib/krb5) includes
2016-04-17 17:10:08 -05:00
pkinit.c
hdb: eliminate hdb_entry_ex
2022-01-15 18:54:57 +11:00
process.c
kdc: Add error symbols for error logging
2022-03-16 15:04:10 -05:00
set_dbinfo.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
simple_csr_authorizer.c
bx509: Fix typos in commentary
2022-08-07 18:59:28 -05:00
string2key-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
string2key.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
string2key.c
remove (krb5_enctype) cast for ETYPE_xxx
2022-01-15 22:05:50 -05:00
test_csr_authorizer.c
hx509/kdc: Move KDC CA utility function into hx509
2020-09-08 00:25:24 -05:00
test_kdc_ca.c
bx509d: Fix warnings
2022-01-14 17:59:49 -06:00
test_token_validator.c
hx509/kdc: Move KDC CA utility function into hx509
2020-09-08 00:25:24 -05:00
token_validator_plugin.h
Add bx509d
2019-12-04 21:34:44 -06:00
token_validator.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
version-script.map
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00