git.samba.org
/
lorikeet-heimdal.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
kdc: Move _krb5_pac_get_attributes_info() call to right place
[lorikeet-heimdal.git]
/
kdc
/
krb5tgs.c
2023-05-03
Joseph Sutton
kdc: Move _krb5_pac_get_attributes_info() call to right...
blob
|
commitdiff
|
raw
2023-05-03
Joseph Sutton
kdc-plugin: Split updating a PAC out of PAC verification
blob
|
commitdiff
|
raw
|
diff to current
2023-05-03
Joseph Sutton
kdc: Call _kdc_fast_check_armor_pac() prior to calling...
blob
|
commitdiff
|
raw
|
diff to current
2023-05-03
Andrew Bartlett
CVE-2022-37966 kdc: Implement new Kerberos session...
blob
|
commitdiff
|
raw
|
diff to current
2023-05-03
Joseph Sutton
CVE-2022-37967 Add new PAC checksum
blob
|
commitdiff
|
raw
|
diff to current
2023-05-03
Stefan Metzmacher
kdc: don't fail salt_fastuser_crypto with r->req.req_bo...
blob
|
commitdiff
|
raw
|
diff to current
2023-01-04
Nicolas Williams
kdc: Quiet warnings re: debug logging
blob
|
commitdiff
|
raw
|
diff to current
2023-01-04
Nicolas Williams
kdc: Fix #1059
blob
|
commitdiff
|
raw
|
diff to current
2023-01-04
Nicolas Williams
kdc: Quiet set-but-not-use variable warning
blob
|
commitdiff
|
raw
|
diff to current
2022-09-25
Stefan Metzmacher
kdc: add enable_fast option (enabled by default)
blob
|
commitdiff
|
raw
|
diff to current
2022-03-02
Luke Howard
kdc: allow audit plugins to influence return code
blob
|
commitdiff
|
raw
|
diff to current
2022-03-02
Stefan Metzmacher
kdc: provide kdc_request_get_explicit_armor_{clientdb...
blob
|
commitdiff
|
raw
|
diff to current
2022-03-02
Stefan Metzmacher
kdc-plugin: also pass astgs_request_t to the pac relate...
blob
|
commitdiff
|
raw
|
diff to current
2022-01-20
Luke Howard
base: change ret fieldname to error_code in request...
blob
|
commitdiff
|
raw
|
diff to current
2022-01-18
Nicolas Williams
kdc: Fix recent dangling ptr; move more into r
blob
|
commitdiff
|
raw
|
diff to current
2022-01-18
Nicolas Williams
kdc: Check errors from krb5_auth_con_getauthenticator()
blob
|
commitdiff
|
raw
|
diff to current
2022-01-18
Luke Howard
kdc: make auditing API public
blob
|
commitdiff
|
raw
|
diff to current
2022-01-17
Nicolas Williams
kdc: Quiet a coverity warning (TGS)
blob
|
commitdiff
|
raw
|
diff to current
2022-01-15
Luke Howard
hdb: eliminate hdb_entry_ex
blob
|
commitdiff
|
raw
|
diff to current
2022-01-15
Luke Howard
hdb: decorate HDB_entry with context member
blob
|
commitdiff
|
raw
|
diff to current
2022-01-10
Luke Howard
kdc: send request, not TGS, server name in TGS errors
blob
|
commitdiff
|
raw
|
diff to current
2022-01-10
Luke Howard
kdc: use astgs_request_t for client/server name (TGS)
blob
|
commitdiff
|
raw
|
diff to current
2022-01-05
Luke Howard
kdc: move Services for User implementation out of krb5tgs.c
blob
|
commitdiff
|
raw
|
diff to current
2022-01-03
Luke Howard
base: s/addkv_{bool,number,object}/setkv
blob
|
commitdiff
|
raw
|
diff to current
2022-01-03
Luke Howard
kdc: add audit plugin API to windc API
blob
|
commitdiff
|
raw
|
diff to current
2022-01-03
Luke Howard
Revert "heimdal: handle referrals for 3 part DRSUAPI...
blob
|
commitdiff
|
raw
|
diff to current
2022-01-03
Luke Howard
kdc: add referral_policy callback to windc plugin
blob
|
commitdiff
|
raw
|
diff to current
2022-01-02
Luke Howard
kdc: audit "yes" boolean values as booleans
blob
|
commitdiff
|
raw
|
diff to current
2022-01-02
Luke Howard
kdc: call HDB audit function in both AS and TGS
blob
|
commitdiff
|
raw
|
diff to current
2022-01-02
Luke Howard
kdc: make error code available to audit function
blob
|
commitdiff
|
raw
|
diff to current
2022-01-02
Luke Howard
kdc: preserve value types in auditing
blob
|
commitdiff
|
raw
|
diff to current
2021-12-26
Nicolas Williams
kdc: Add ret to common svc req elements
blob
|
commitdiff
|
raw
|
diff to current
2021-12-24
Nicolas Williams
kdc: Stop confusing the compiler
blob
|
commitdiff
|
raw
|
diff to current
2021-12-23
Luke Howard
kdc: remove e_text argument to _kdc_encode_reply()
blob
|
commitdiff
|
raw
|
diff to current
2021-12-23
Luke Howard
kdc: remove outpadata from astgs_request_t
blob
|
commitdiff
|
raw
|
diff to current
2021-12-23
Luke Howard
kdc: simplify client_access windc plugin API
blob
|
commitdiff
|
raw
|
diff to current
2021-12-23
Luke Howard
kdc: add finalize_reply API to windc plugin
blob
|
commitdiff
|
raw
|
diff to current
2021-12-23
Luke Howard
kdc: use rep/et/ek fields in astgs_request_t
blob
|
commitdiff
|
raw
|
diff to current
2021-12-23
Luke Howard
kdc: move PAC into astgs_request_t structure
blob
|
commitdiff
|
raw
|
diff to current
2021-12-23
Luke Howard
kdc: centralize include PAC logic
blob
|
commitdiff
|
raw
|
diff to current
2021-12-23
Luke Howard
kdc: remove pac_attributes_present field
blob
|
commitdiff
|
raw
|
diff to current
2021-12-22
Luke Howard
kdc: honor PAC_ATTRIBUTES in presented TGT
blob
|
commitdiff
|
raw
|
diff to current
2021-12-22
Luke Howard
kdc: don't add PAC_ATTRIBUTES PAC buffer for service...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-21
Luke Howard
kdc: support for PAC_ATTRIBUTES_INFO
blob
|
commitdiff
|
raw
|
diff to current
2021-12-21
Luke Howard
kdc: add canonical principal name to authz data
blob
|
commitdiff
|
raw
|
diff to current
2021-12-18
Luke Howard
kdc: allow cross-realm FAST armor TGT
blob
|
commitdiff
|
raw
|
diff to current
2021-12-18
Luke Howard
kdc: add auth data type for synthetic principals
blob
|
commitdiff
|
raw
|
diff to current
2021-12-18
Nicolas Williams
kdc: Check unparse_flags() result differently
blob
|
commitdiff
|
raw
|
diff to current
2021-12-18
Luke Howard
Revert "tgs-rep: always return canonical realm when...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-17
Isaac Boukris
tgs-rep: always return canonical realm when force_canon...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-16
Joseph Sutton
kdc: Optionally allow missing additional ticket PAC...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-16
Joseph Sutton
kdc: Verify PAC in TGT provided for user-to-user authen...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-16
Joseph Sutton
kdc: Check name in request against name in user-to...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-16
Joseph Sutton
kdc: Use sname from request rather than user-to-user...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-16
Joseph Sutton
kdc: Move fetching krbtgt entry to before enctype selection
blob
|
commitdiff
|
raw
|
diff to current
2021-12-16
Joseph Sutton
kdc: Check return code
blob
|
commitdiff
|
raw
|
diff to current
2021-12-16
Joseph Sutton
kdc: Avoid races and multiple DB lookups in s4u2self...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-16
Joseph Sutton
kdc: Optionally require that PAC be be present
blob
|
commitdiff
|
raw
|
diff to current
2021-12-16
Joseph Sutton
kdc: Make check_PAC() and verify_flags() accessible...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-14
Joseph Sutton
kdc: Check authdata in ticket rather than in request...
blob
|
commitdiff
|
raw
|
diff to current
2021-12-14
Luke Howard
kdc: update PAC hooks for Samba
blob
|
commitdiff
|
raw
|
diff to current
2021-12-14
Luke Howard
kdc: don't leak armor crypto in TGS path
blob
|
commitdiff
|
raw
|
diff to current
2021-12-13
Luke Howard
kdc: remove temporary krb5_context variable
blob
|
commitdiff
|
raw
|
diff to current
2021-12-13
Luke Howard
kdc: salt FAST cookie key with client name
blob
|
commitdiff
|
raw
|
diff to current
2021-12-13
Luke Howard
kdc: sync KDC FAST with Heimdal-597.121.1
blob
|
commitdiff
|
raw
|
diff to current
2021-11-25
Nicolas Williams
Always perform == or != operation on cmp function result
blob
|
commitdiff
|
raw
|
diff to current
2021-11-24
Andrew Bartlett
kdc: Fix ‘header_key’ may be used uninitialized in...
blob
|
commitdiff
|
raw
|
diff to current
2021-10-11
Nicolas Williams
kdc: Fix leak and loss of kdc_check_flags() reason
blob
|
commitdiff
|
raw
|
diff to current
2021-10-11
Nicolas Williams
kdc: Fix leak on TGS referral
blob
|
commitdiff
|
raw
|
diff to current
2021-09-23
Luke Howard
kdc: move _kdc_verify_checksum() to misc.c
blob
|
commitdiff
|
raw
|
diff to current
2021-09-21
Luke Howard
kdc: map KRB5_PROG_SUMTYPE_NOSUPP to KRB5KDC_ERR_SUMTYP...
blob
|
commitdiff
|
raw
|
diff to current
2021-09-21
Luke Howard
krb5: make keyed checksums mandatory where possible
blob
|
commitdiff
|
raw
|
diff to current
2021-09-20
Isaac Boukris
krb5: allow NULL parameter to krb5_pac_free()
blob
|
commitdiff
|
raw
|
diff to current
2021-09-19
Isaac Boukris
kdc: sign ticket using Windows PAC
blob
|
commitdiff
|
raw
|
diff to current
2021-09-19
Isaac Boukris
kdc: remove KRB5SignedPath, to be replaced with PAC
blob
|
commitdiff
|
raw
|
diff to current
2021-09-13
Luke Howard
kdc: avoid re-encoding KDC-REQ-BODY
blob
|
commitdiff
|
raw
|
diff to current
2021-08-27
Luke Howard
kdc: fix _kdc_set_e_text argument in previous commit
blob
|
commitdiff
|
raw
|
diff to current
2021-08-27
Luke Howard
kdc: validate sname in TGS-REQ
blob
|
commitdiff
|
raw
|
diff to current
2021-06-30
Andrew Bartlett
Fix user2user principal (again)
blob
|
commitdiff
|
raw
|
diff to current
2021-06-29
Nicolas Williams
kdc: Audit more TGS failure reasons
blob
|
commitdiff
|
raw
|
diff to current
2021-06-29
Nicolas Williams
kdc: Add synthetic PKINIT principals option
blob
|
commitdiff
|
raw
|
diff to current
2021-06-23
Andrew Bartlett
Provide the correct principal name to verify_flags...
blob
|
commitdiff
|
raw
|
diff to current
2021-05-14
Nicolas Williams
kdc: Improve warn_ticket_addresses feature (fix bug)
blob
|
commitdiff
|
raw
|
diff to current
2021-05-12
Nicolas Williams
kdc: Improve warn_ticket_addresses feature
blob
|
commitdiff
|
raw
|
diff to current
2021-04-14
Nicolas Williams
kdc: Add warn_ticket_addresses config option
blob
|
commitdiff
|
raw
|
diff to current
2021-03-26
Nicolas Williams
kdc: Reduce log level of some messages
blob
|
commitdiff
|
raw
|
diff to current
2021-03-01
Nicolas Williams
asn1: X.681/682/683 magic handling of open types
blob
|
commitdiff
|
raw
|
diff to current
2020-09-10
Nicolas Williams
hdb: Do not apply new service key delay to clients
blob
|
commitdiff
|
raw
|
diff to current
2020-02-11
Isaac Boukris
tgs-req: strip forwardable and proxiable if the server...
blob
|
commitdiff
|
raw
|
diff to current
2019-12-11
Nicolas Williams
kdc: Fix audit_addkv() typos and reason handling
blob
|
commitdiff
|
raw
|
diff to current
2019-12-10
Isaac Boukris
CVE-2019-14870: Validate client attributes in protocol...
blob
|
commitdiff
|
raw
|
diff to current
2019-12-10
Isaac Boukris
CVE-2019-14870: Apply forwardable policy in protocol...
blob
|
commitdiff
|
raw
|
diff to current
2019-12-10
Isaac Boukris
CVE-2019-14870: Always lookup impersonate client in DB
blob
|
commitdiff
|
raw
|
diff to current
2019-12-05
Nicolas Williams
kdc: Fix warnings: fix _kdc_audit_addkv() usage
blob
|
commitdiff
|
raw
|
diff to current
2019-12-05
Roland C. Dowdeswell
Reduce older log messages to level 4 and collect some...
blob
|
commitdiff
|
raw
|
diff to current
2019-12-05
Roland C. Dowdeswell
Generate a single summary audit line for AS/TGS.
blob
|
commitdiff
|
raw
|
diff to current
2019-10-21
Roland C. Dowdeswell
Define log levels in docs and change default to 0-3.
blob
|
commitdiff
|
raw
|
diff to current
2019-06-03
Jeffrey Altman
kdc: history of request_anonymous vs cname-in-addl...
blob
|
commitdiff
|
raw
|
diff to current
2019-06-03
Luke Howard
kdc: don't misidentify constrained delegation requests...
blob
|
commitdiff
|
raw
|
diff to current
2019-06-03
Luke Howard
kdc: refactor anonymous checks in KDC
blob
|
commitdiff
|
raw
|
diff to current
next