oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
Files
fd77c4000dff70fdab17d8be19801608f4c8ca43
heimdal/kdc
History
Taylor R Campbell fd77c4000d Ensure all calls to getaddrinfo are headed by a block_dns check. 
If block_dns is set, call getaddrinfo with AI_NUMERICHOST set and
AI_CANONNAME clear.

Some paths may not have set AI_CANONNAME, but it's easier to audit
this way when the getaddrinfo prelude is uniform across call sites,
and the compiler can optimize it away.
2024-01-08 10:22:02 -06:00
..
altsecid_gss_preauth_authorizer.c
gss: remove gss_get_instance()
2022-01-30 14:20:05 -05:00
announce.c
cast to avoid size_t vs int issue
2011-07-24 13:07:07 -07:00
bx509d.8
bx509d: Add /get-tgts batch end-point
2022-10-02 22:46:37 -05:00
bx509d.c
Fix ctype.h misuse.
2023-05-26 14:10:11 -05:00
ca.c
kdc: kdc_issue_certificate remove dead code
2022-01-17 22:41:33 -05:00
cjwt_token_validator.c
bx509d: Fix warnings
2022-01-14 17:59:49 -06:00
config.c
kcm,kdc/config.c: detect too big max_request sizes (>= 64 MB)
2023-06-20 12:57:28 -05:00
connect.c
kdc: Do not announce via Bonjour when testing
2022-01-20 00:20:30 -06:00
csr_authorizer_plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
csr_authorizer.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
default_config.c
kdc: Add global disable_pac config param
2023-06-23 13:44:13 -05:00
digest-service.c
Use constant-time memcmp when comparing sensitive buffers
2022-04-30 13:35:52 -04:00
digest.c
Use constant-time memcmp when comparing sensitive buffers
2022-04-30 13:35:52 -04:00
fast.c
kdc: Specify client time in FAST inner KRB-ERROR
2023-11-02 20:19:54 -05:00
gss_preauth_authorizer_plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
gss_preauth.c
heimdal: Fix the 32-bit build on FreeBSD
2022-11-16 23:46:46 -05:00
headers.h
kdc: move auth event definitions into KDC header
2022-01-13 14:51:31 +11:00
hprop-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hprop.8
kdc: remove unused v4 hprop code
2021-12-30 20:42:18 +11:00
hprop.c
Ensure all calls to getaddrinfo are headed by a block_dns check.
2024-01-08 10:22:02 -06:00
hprop.h
hdb: eliminate hdb_entry_ex
2022-01-15 18:54:57 +11:00
hpropd-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hpropd.8
kdc: remove unused v4 hprop code
2021-12-30 20:42:18 +11:00
hpropd.c
hpropd: Fix use-after-free? (WIP)
2023-01-04 01:36:02 -06:00
httpkadmind.8
httpkadmind: Make more like bx509d internally
2022-10-02 22:46:37 -05:00
httpkadmind.c
httpkadmind: Add auth-data-reqd attribute
2023-06-23 13:44:13 -05:00
ipc_csr_authorizer.c
Fix ctype.h misuse.
2023-05-26 14:10:11 -05:00
kdc_locl.h
kdc: Add global disable_pac config param
2023-06-23 13:44:13 -05:00
kdc-accessors.h
kdc: provide kdc_request_get_explicit_armor_{clientdb,client,pac}()
2022-03-03 10:10:29 +11:00
kdc-audit.h
kdc: add wrappers for heimbase object accessors
2022-01-28 17:24:57 -06:00
kdc-plugin.c
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00
kdc-plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
kdc-replay.c
kdc: Fix warnings
2022-01-14 17:59:49 -06:00
kdc-tester.c
kdc: Quiet set-but-not-use variable warning in kdc-tester
2023-01-04 01:36:01 -06:00
kdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kdc.8
Optional backwards-compatible anon-pkinit behaviour
2019-09-04 18:00:15 -04:00
kdc.h
kdc: add wrappers for heimbase object accessors
2022-01-28 17:24:57 -06:00
kerberos5.c
kdc: Fix spelling of error and log messages
2023-11-28 21:34:35 -05:00
krb5tgs.c
kdc: Fix spelling of error and log messages
2023-11-28 21:34:35 -05:00
kstash-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
kstash.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
kstash.c
kstash: Fix warning
2022-01-14 17:54:55 -06:00
kx509.c
kdc: make auditing API public
2022-01-18 16:09:50 +11:00
libkdc-exports.def
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00
libkdc-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
log.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
main.c
kdc: Fix leaks
2019-12-09 21:39:30 -06:00
Makefile.am
bx509d: Add test of IPC CSR authorizer
2022-12-15 17:44:41 -06:00
misc.c
kdc: Add global disable_pac config param
2023-06-23 13:44:13 -05:00
mit_dump.c
kdc: Quiet set-but-not-use variable warning in HDB dump code
2023-01-04 01:36:02 -06:00
mssfu.c
kdc: Remove trailing space from log message
2023-06-20 18:02:15 -05:00
negotiate_token_validator.c
gss: remove gss_get_instance()
2022-01-30 14:20:05 -05:00
NTMakefile
kdc: add accessor functions for KDC request structure
2022-01-20 17:23:24 +11:00
pkinit-ec.c
kdc: OpenSSL 3.0 support
2022-11-22 11:34:54 -05:00
pkinit.c
kdc: Make parameter const
2023-11-28 21:37:56 -05:00
process.c
kdc: Add error symbols for error logging
2022-03-16 15:04:10 -05:00
set_dbinfo.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
string2key-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
string2key.8
remove trailing whitespace
2011-05-21 11:57:31 -07:00
string2key.c
remove (krb5_enctype) cast for ETYPE_xxx
2022-01-15 22:05:50 -05:00
test_csr_authorizer.c
Fix ctype.h misuse.
2023-05-26 14:10:11 -05:00
test_kdc_ca.c
bx509d: Fix warnings
2022-01-14 17:59:49 -06:00
test_token_validator.c
test_token_validator: Quiet set-but-not-use variable warning
2023-01-04 01:36:02 -06:00
token_validator_plugin.h
Introduce macro for common plugin structure elements
2022-11-17 17:15:21 -06:00
token_validator.c
kdc: annotate libkdc Windows function annotations
2022-01-04 12:27:43 +11:00
version-script.map
kdc: Add function to add encrypted padata
2022-03-08 18:58:17 +11:00