Nicolas Williams b20bb509bd Fix never valid error condition in KDC ...

The TGS was incorrectly using authtime to compute renew_till for new
tickets, which was in turn leading to endtime potentially being equal to
starttime, which caused the TGS to return KRB5KDC_ERR_NEVER_VALID.

This happens when the TGT renewal lifetime is longer than the max renew
lifetime of any other services, after that much time (target services'
max renew life) passes.  The TGT is still good but TGS-REQs fail.

2013-11-26 16:57:19 -06:00

..

announce.c

cast to avoid size_t vs int issue

2011-07-24 13:07:07 -07:00

config.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

connect.c

Fix typo with return values in realloc_descrs.

2012-11-22 17:24:40 -08:00

default_config.c

Rename and fix as/tgs-use-strongest-key config parameters

2011-11-25 17:21:04 -06:00

digest-service.c

Initial patch for dealing with AD x-realm key rollover

2011-11-15 21:53:33 -06:00

digest.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

fast.c

Initial patch for dealing with AD x-realm key rollover

2011-11-15 21:53:33 -06:00

headers.h

Create a request structure

2011-07-24 20:24:37 -07:00

hprop-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hprop.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hprop.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

hprop.h

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

hpropd-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hpropd.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hpropd.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

kdc_locl.h

use json to drive kdc-tester

2011-11-21 20:34:35 -08:00

kdc-replay.c

Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.

2012-02-20 19:45:41 +00:00

kdc-tester.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

kdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kdc.8

fix typo, from Robert Simmons

2011-11-13 10:01:41 -08:00

kdc.h

Rename and fix as/tgs-use-strongest-key config parameters

2011-11-25 17:21:04 -06:00

kerberos5.c

_kdc_find_etype: prefer default salt for preauth

2013-07-30 14:16:19 -04:00

krb5tgs.c

Fix never valid error condition in KDC

2013-11-26 16:57:19 -06:00

kstash-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kstash.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kstash.c

Add -Wshadow and deal with the warnings.

2012-02-21 11:17:55 +00:00

kx509.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

libkdc-exports.def

Windows: Fix export lists

2010-11-29 10:53:49 -05:00

libkdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

log.c

Error/warning cleanups for clang (LLVM)

2011-11-28 14:42:06 -06:00

main.c

add HDBGET: that only supports get, iteration doesnt really make sense for the HDB keytab except when dumping

2013-10-15 12:40:39 +02:00

Makefile.am

Make concurrent builds work.

2012-08-08 00:04:04 +01:00

misc.c

Really bug in KDC handling of enterprise princs

2013-08-01 20:17:17 -05:00

mit_dump.c

Fix MIT dump entry parsing bug that forced 2048 sz

2013-11-20 01:08:22 -06:00

NTMakefile

Windows: ktutil.exe requires libkadmsrv and libhdb

2013-09-13 22:17:43 -04:00

pkinit.c

don't bother seeing q if not sent

2013-04-29 11:42:46 -07:00

process.c

drain pool for each request

2012-04-05 22:55:01 -07:00

rx.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

set_dbinfo.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

string2key.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key.c

catch error value from krb5_ functions and exit

2013-06-28 08:40:49 +02:00

version-script.map

add _kdc_db_fetch and _kdc_free_ent for digest-service

2011-01-30 12:12:30 -08:00

windc_plugin.h

change client access message

2011-07-24 20:24:35 -07:00

windc.c

switch to new plugin handler

2013-06-04 00:04:16 -07:00