Nicolas Williams 8586d9f88e Fix enctype selection issues for PAC and other authz-data signatures ...

We were using the enctype from the PA-TGS-REQ's AP-REQ's Ticket to
    decide what key from the service's realm's krbtgt principal to use.
    This breaks when: a) we're doing cross-realm, b) the service's
    realm's krbtgt principal doesn't have keys for the enctype used in
    the cross-realm TGT.

    The fix is to pick the correct key (strongest or first, per-config)
    from the service's realm's krbtgt principal.

2011-11-09 00:32:38 -06:00

..

announce.c

cast to avoid size_t vs int issue

2011-07-24 13:07:07 -07:00

config.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

connect.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

default_config.c

switch to use use_strongest_server_key

2011-07-24 10:33:28 -07:00

digest-service.c

Create a request structure

2011-07-24 20:24:37 -07:00

digest.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

fast.c

add constant for WELLKNOWN:ORG.H5L realm

2011-07-24 21:29:27 -07:00

headers.h

Create a request structure

2011-07-24 20:24:37 -07:00

hprop-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hprop.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hprop.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hprop.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

hpropd-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

hpropd.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

hpropd.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kdc_locl.h

fast cookie expiration

2011-07-24 21:21:39 -07:00

kdc-replay.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kdc.8

remove refernces to kerberos 4 and kaserver

2011-10-12 12:40:59 +02:00

kdc.h

This patch adds support for a use-strongest-server-key krb5.conf kdc parameter that controls how the KDC (AS and TGS) selects a long-term key from a service principal's HDB entry. If TRUE the KDC picks the strongest supported key from the service principal's current keyset. If FALSE the KDC picks the first supported key from the service principal's current keyset.

2011-06-14 20:35:19 -07:00

kerberos5.c

Fixes to make Heimdal -Wall -Werror clean

2011-11-02 21:42:08 -05:00

krb5tgs.c

Fix enctype selection issues for PAC and other authz-data signatures

2011-11-09 00:32:38 -06:00

kstash-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

kstash.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kstash.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

kx509.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

libkdc-exports.def

Windows: Fix export lists

2010-11-29 10:53:49 -05:00

libkdc-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

log.c

Warning fixes from Christos Zoulas

2011-04-29 20:25:05 -07:00

main.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

Makefile.am

merge support for FAST in as-req codepath

2011-10-28 19:25:48 -07:00

misc.c

Fixes to make Heimdal -Wall -Werror clean

2011-11-02 21:42:08 -05:00

mit_dump.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

NTMakefile

drop unused KRB4 bits

2011-07-30 14:14:52 -07:00

pkinit.c

merge support for FAST in as-req codepath

2011-10-28 19:25:48 -07:00

process.c

Create a request structure

2011-07-24 20:24:37 -07:00

rx.h

remove trailing whitespace

2008-09-13 09:21:03 +00:00

set_dbinfo.c

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key-version.rc

Windows: Version information for binaries

2010-08-20 13:06:54 -04:00

string2key.8

remove trailing whitespace

2011-05-21 11:57:31 -07:00

string2key.c

Fixes to make Heimdal -Wall -Werror clean

2011-11-02 21:42:08 -05:00

version-script.map

add _kdc_db_fetch and _kdc_free_ent for digest-service

2011-01-30 12:12:30 -08:00

windc_plugin.h

change client access message

2011-07-24 20:24:35 -07:00

windc.c

change client access message

2011-07-24 20:24:35 -07:00