oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
Files
aff90c322e786bacceb58c7745922e14e5694603
heimdal/kdc
History
Jeffrey Altman c753ed5b7f kdc: APPLE disable enable-pkinit by default as documented 
commit 4d48b172ab ("add pkinit
configration for btmm") introduced automatic configuration of
the 'pkinit_kdc_identity' and 'pkinit_kdc_friendly_name' on macOS
but also modified the default for the 'enable_pkinit' setting
such that pkinit is enabled on all __APPLE__ platforms overriding
the [kdc] enable-pkinit setting obtained from the configuration.

This change modifies the enable-pkinit behavior on __APPLE__ platforms
to match those on every other platform.  __APPLE__ platforms will
continue to auto-configure the [kdc] pkinit_identity and
[kdc] pkinit_anchors if they are not specified in the configuration.
2024-06-16 23:27:37 -04:00
..
altsecid_gss_preauth_authorizer.c
Ensure all calls to rk_dns_lookup are headed by a block_dns check.
2024-01-08 10:22:02 -06:00
announce.c
cast to avoid size_t vs int issue
2011-07-24 13:07:07 -07:00
bx509d.8
bx509d: Add /get-tgts batch end-point
2022-10-02 22:46:37 -05:00
bx509d.c
Fix ctype.h misuse.
2023-05-26 14:10:11 -05:00
ca.c
kdc: kdc_issue_certificate remove dead code
2022-01-17 22:41:33 -05:00
cjwt_token_validator.c
bx509d: Fix warnings
2022-01-14 17:59:49 -06:00
config.c
kcm,kdc/config.c: detect too big max_request sizes (>= 64 MB)
2023-06-20 12:57:28 -05:00
connect.c
kdc: Do not announce via Bonjour when testing
2022-01-20 00:20:30 -06:00
csr_authorizer_plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
csr_authorizer.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
default_config.c
kdc: APPLE disable enable-pkinit by default as documented
2024-06-16 23:27:37 -04:00
digest-service.c
Use constant-time memcmp when comparing sensitive buffers
2022-04-30 13:35:52 -04:00
digest.c
Use constant-time memcmp when comparing sensitive buffers
2022-04-30 13:35:52 -04:00
fast.c
kdc: Specify client time in FAST inner KRB-ERROR
2023-11-02 20:19:54 -05:00
gss_preauth_authorizer_plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
gss_preauth.c
heimdal: Fix the 32-bit build on FreeBSD
2022-11-16 23:46:46 -05:00
headers.h
kdc: move auth event definitions into KDC header
2022-01-13 14:51:31 +11:00
hprop-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hprop.8
kdc: remove unused v4 hprop code
2021-12-30 20:42:18 +11:00
hprop.c
Ensure all calls to getaddrinfo are headed by a block_dns check.
2024-01-08 10:22:02 -06:00
hprop.h
hdb: eliminate hdb_entry_ex
2022-01-15 18:54:57 +11:00
hpropd-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hpropd.8
kdc: remove unused v4 hprop code
2021-12-30 20:42:18 +11:00
hpropd.c
hpropd: Fix use-after-free? (WIP)
2023-01-04 01:36:02 -06:00
httpkadmind.8
httpkadmind: Make more like bx509d internally
2022-10-02 22:46:37 -05:00
httpkadmind.c
httpkadmind: Add auth-data-reqd attribute
2023-06-23 13:44:13 -05:00
ipc_csr_authorizer.c
Fix ctype.h misuse.
2023-05-26 14:10:11 -05:00
kdc_locl.h
kdc: Add global disable_pac config param
2023-06-23 13:44:13 -05:00
kdc-accessors.h
kdc: provide kdc_request_get_explicit_armor_{clientdb,client,pac}()
2022-03-03 10:10:29 +11:00
kdc-audit.h
kdc: add wrappers for heimbase object accessors
2022-01-28 17:24:57 -06:00
kdc-plugin.c
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00
kdc-plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
kdc-replay.c
kdc: Fix warnings
2022-01-14 17:59:49 -06:00
kdc-tester.c
kdc: Quiet set-but-not-use variable warning in kdc-tester
2023-01-04 01:36:01 -06:00
kdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kdc.8
doc: Clarify kdc --ports / [kdc] ports (fix #1223)
2024-01-16 11:28:35 -06:00
kdc.h
kdc: add wrappers for heimbase object accessors
2022-01-28 17:24:57 -06:00
kerberos5.c
kdc: Return NEVER_VALID error code if ticket will never be valid
2024-01-09 16:06:06 -06:00
krb5tgs.c
kdc: don't fail salt_fastuser_crypto with r->req.req_body.cname == NULL for TGS-REQ
2024-01-09 16:06:06 -06:00
kstash-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kstash.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kstash.c
kstash: Fix warning
2022-01-14 17:54:55 -06:00
kx509.c
kdc: make auditing API public
2022-01-18 16:09:50 +11:00
libkdc-exports.def
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00
libkdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
log.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
main.c
kdc: Fix leaks
2019-12-09 21:39:30 -06:00
Makefile.am
kdc: per-target CPPFLAGS do not have an _AM in the variable name
2024-05-20 22:04:21 -04:00
misc.c
kdc: Add global disable_pac config param
2023-06-23 13:44:13 -05:00
mit_dump.c
kdc: Quiet set-but-not-use variable warning in HDB dump code
2023-01-04 01:36:02 -06:00
mssfu.c
kdc: Remove trailing space from log message
2023-06-20 18:02:15 -05:00
negotiate_token_validator.c
gss: remove gss_get_instance()
2022-01-30 14:20:05 -05:00
NTMakefile
kdc: add accessor functions for KDC request structure
2022-01-20 17:23:24 +11:00
pkinit-ec.c
kdc: OpenSSL 3.0 support
2022-11-22 11:34:54 -05:00
pkinit.c
kdc: Fix leak with PK-INIT-Win2k
2024-01-09 16:06:06 -06:00
process.c
kdc: -Wcalloc-transposed args
2024-06-04 06:22:37 -04:00
set_dbinfo.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
string2key-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
string2key.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
string2key.c
remove (krb5_enctype) cast for ETYPE_xxx
2022-01-15 22:05:50 -05:00
test_csr_authorizer.c
Fix ctype.h misuse.
2023-05-26 14:10:11 -05:00
test_kdc_ca.c
bx509d: Fix warnings
2022-01-14 17:59:49 -06:00
test_token_validator.c
test_token_validator: Quiet set-but-not-use variable warning
2023-01-04 01:36:02 -06:00
token_validator_plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
token_validator.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
version-script.map
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00