kdc: Move _krb5_pac_get_attributes_info() call to right place
[lorikeet-heimdal.git] / kdc / krb5tgs.c
2023-05-03 Joseph Suttonkdc: Move _krb5_pac_get_attributes_info() call to right...
2023-05-03 Joseph Suttonkdc-plugin: Split updating a PAC out of PAC verification
2023-05-03 Joseph Suttonkdc: Call _kdc_fast_check_armor_pac() prior to calling...
2023-05-03 Andrew BartlettCVE-2022-37966 kdc: Implement new Kerberos session...
2023-05-03 Joseph SuttonCVE-2022-37967 Add new PAC checksum
2023-05-03 Stefan Metzmacherkdc: don't fail salt_fastuser_crypto with r->req.req_bo...
2023-01-04 Nicolas Williamskdc: Quiet warnings re: debug logging
2023-01-04 Nicolas Williamskdc: Fix #1059
2023-01-04 Nicolas Williamskdc: Quiet set-but-not-use variable warning
2022-09-25 Stefan Metzmacherkdc: add enable_fast option (enabled by default)
2022-03-02 Luke Howardkdc: allow audit plugins to influence return code
2022-03-02 Stefan Metzmacherkdc: provide kdc_request_get_explicit_armor_{clientdb...
2022-03-02 Stefan Metzmacherkdc-plugin: also pass astgs_request_t to the pac relate...
2022-01-20 Luke Howardbase: change ret fieldname to error_code in request...
2022-01-18 Nicolas Williamskdc: Fix recent dangling ptr; move more into r
2022-01-18 Nicolas Williamskdc: Check errors from krb5_auth_con_getauthenticator()
2022-01-18 Luke Howardkdc: make auditing API public
2022-01-17 Nicolas Williamskdc: Quiet a coverity warning (TGS)
2022-01-15 Luke Howardhdb: eliminate hdb_entry_ex
2022-01-15 Luke Howardhdb: decorate HDB_entry with context member
2022-01-10 Luke Howardkdc: send request, not TGS, server name in TGS errors
2022-01-10 Luke Howardkdc: use astgs_request_t for client/server name (TGS)
2022-01-05 Luke Howardkdc: move Services for User implementation out of krb5tgs.c
2022-01-03 Luke Howardbase: s/addkv_{bool,number,object}/setkv
2022-01-03 Luke Howardkdc: add audit plugin API to windc API
2022-01-03 Luke HowardRevert "heimdal: handle referrals for 3 part DRSUAPI...
2022-01-03 Luke Howardkdc: add referral_policy callback to windc plugin
2022-01-02 Luke Howardkdc: audit "yes" boolean values as booleans
2022-01-02 Luke Howardkdc: call HDB audit function in both AS and TGS
2022-01-02 Luke Howardkdc: make error code available to audit function
2022-01-02 Luke Howardkdc: preserve value types in auditing
2021-12-26 Nicolas Williamskdc: Add ret to common svc req elements
2021-12-24 Nicolas Williamskdc: Stop confusing the compiler
2021-12-23 Luke Howardkdc: remove e_text argument to _kdc_encode_reply()
2021-12-23 Luke Howardkdc: remove outpadata from astgs_request_t
2021-12-23 Luke Howardkdc: simplify client_access windc plugin API
2021-12-23 Luke Howardkdc: add finalize_reply API to windc plugin
2021-12-23 Luke Howardkdc: use rep/et/ek fields in astgs_request_t
2021-12-23 Luke Howardkdc: move PAC into astgs_request_t structure
2021-12-23 Luke Howardkdc: centralize include PAC logic
2021-12-23 Luke Howardkdc: remove pac_attributes_present field
2021-12-22 Luke Howardkdc: honor PAC_ATTRIBUTES in presented TGT
2021-12-22 Luke Howardkdc: don't add PAC_ATTRIBUTES PAC buffer for service...
2021-12-21 Luke Howardkdc: support for PAC_ATTRIBUTES_INFO
2021-12-21 Luke Howardkdc: add canonical principal name to authz data
2021-12-18 Luke Howardkdc: allow cross-realm FAST armor TGT
2021-12-18 Luke Howardkdc: add auth data type for synthetic principals
2021-12-18 Nicolas Williamskdc: Check unparse_flags() result differently
2021-12-18 Luke HowardRevert "tgs-rep: always return canonical realm when...
2021-12-17 Isaac Boukristgs-rep: always return canonical realm when force_canon...
2021-12-16 Joseph Suttonkdc: Optionally allow missing additional ticket PAC...
2021-12-16 Joseph Suttonkdc: Verify PAC in TGT provided for user-to-user authen...
2021-12-16 Joseph Suttonkdc: Check name in request against name in user-to...
2021-12-16 Joseph Suttonkdc: Use sname from request rather than user-to-user...
2021-12-16 Joseph Suttonkdc: Move fetching krbtgt entry to before enctype selection
2021-12-16 Joseph Suttonkdc: Check return code
2021-12-16 Joseph Suttonkdc: Avoid races and multiple DB lookups in s4u2self...
2021-12-16 Joseph Suttonkdc: Optionally require that PAC be be present
2021-12-16 Joseph Suttonkdc: Make check_PAC() and verify_flags() accessible...
2021-12-14 Joseph Suttonkdc: Check authdata in ticket rather than in request...
2021-12-14 Luke Howardkdc: update PAC hooks for Samba
2021-12-14 Luke Howardkdc: don't leak armor crypto in TGS path
2021-12-13 Luke Howardkdc: remove temporary krb5_context variable
2021-12-13 Luke Howardkdc: salt FAST cookie key with client name
2021-12-13 Luke Howardkdc: sync KDC FAST with Heimdal-597.121.1
2021-11-25 Nicolas WilliamsAlways perform == or != operation on cmp function result
2021-11-24 Andrew Bartlettkdc: Fix ‘header_key’ may be used uninitialized in...
2021-10-11 Nicolas Williamskdc: Fix leak and loss of kdc_check_flags() reason
2021-10-11 Nicolas Williamskdc: Fix leak on TGS referral
2021-09-23 Luke Howardkdc: move _kdc_verify_checksum() to misc.c
2021-09-21 Luke Howardkdc: map KRB5_PROG_SUMTYPE_NOSUPP to KRB5KDC_ERR_SUMTYP...
2021-09-21 Luke Howardkrb5: make keyed checksums mandatory where possible
2021-09-20 Isaac Boukriskrb5: allow NULL parameter to krb5_pac_free()
2021-09-19 Isaac Boukriskdc: sign ticket using Windows PAC
2021-09-19 Isaac Boukriskdc: remove KRB5SignedPath, to be replaced with PAC
2021-09-13 Luke Howardkdc: avoid re-encoding KDC-REQ-BODY
2021-08-27 Luke Howardkdc: fix _kdc_set_e_text argument in previous commit
2021-08-27 Luke Howardkdc: validate sname in TGS-REQ
2021-06-30 Andrew BartlettFix user2user principal (again)
2021-06-29 Nicolas Williamskdc: Audit more TGS failure reasons
2021-06-29 Nicolas Williamskdc: Add synthetic PKINIT principals option
2021-06-23 Andrew BartlettProvide the correct principal name to verify_flags...
2021-05-14 Nicolas Williamskdc: Improve warn_ticket_addresses feature (fix bug)
2021-05-12 Nicolas Williamskdc: Improve warn_ticket_addresses feature
2021-04-14 Nicolas Williamskdc: Add warn_ticket_addresses config option
2021-03-26 Nicolas Williamskdc: Reduce log level of some messages
2021-03-01 Nicolas Williamsasn1: X.681/682/683 magic handling of open types
2020-09-10 Nicolas Williamshdb: Do not apply new service key delay to clients
2020-02-11 Isaac Boukristgs-req: strip forwardable and proxiable if the server...
2019-12-11 Nicolas Williamskdc: Fix audit_addkv() typos and reason handling
2019-12-10 Isaac BoukrisCVE-2019-14870: Validate client attributes in protocol...
2019-12-10 Isaac BoukrisCVE-2019-14870: Apply forwardable policy in protocol...
2019-12-10 Isaac BoukrisCVE-2019-14870: Always lookup impersonate client in DB
2019-12-05 Nicolas Williamskdc: Fix warnings: fix _kdc_audit_addkv() usage
2019-12-05 Roland C. DowdeswellReduce older log messages to level 4 and collect some...
2019-12-05 Roland C. DowdeswellGenerate a single summary audit line for AS/TGS.
2019-10-21 Roland C. DowdeswellDefine log levels in docs and change default to 0-3.
2019-06-03 Jeffrey Altmankdc: history of request_anonymous vs cname-in-addl...
2019-06-03 Luke Howardkdc: don't misidentify constrained delegation requests...
2019-06-03 Luke Howardkdc: refactor anonymous checks in KDC
next