Nicolas Williams 8e7c7209e8 kdc: Add param to derive max_life from client cert ...

This adds a KDC configuration parameter that can be used to indicate
that a PKINIT client's certificate's notAfter overrides the client
principal's HDB entry's max_life.  This parameter is a relative time
parameter, and it enables this only if set to a non-zero value (defaults
to zero).  The value of this parameter caps the max_life inferred from
the certificate.

2021-03-23 16:44:50 -05:00

..

bin

kdc: Add httpkadmind

2020-09-08 14:34:08 -05:00

can

Fix tests/can and tests/kdc

2019-12-05 17:22:47 -06:00

db

Minor typo/grammar fixes

2017-03-10 15:47:43 -05:00

gss

hdb: Move virtual principals into HDB layer

2020-09-08 00:25:36 -05:00

java

Use --detach in tests to avoid waiting

2016-12-07 19:52:29 -06:00

kdc

kdc: Add param to derive max_life from client cert

2021-03-23 16:44:50 -05:00

ldap

Fix defaultsearchbase in check-ldap's slapd.conf

2018-12-27 15:55:49 -06:00

plugin

Add bx509d

2019-12-04 21:34:44 -06:00

ChangeLog

switch to utf8 encoding of all files

2008-09-13 08:53:55 +00:00

Makefile.am

Test name canon rules via GSS and put kdc tests last

2011-10-22 14:54:27 -05:00

NTMakefile

First drop of Windows build infrastructure from Secure Endpoints

2009-11-24 12:12:53 -08:00