aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2009-12-28make reindentanonymousSam Hartman12-91/+90
2009-12-23Declare functions in this header inline to avoid warnings for unused codeSam Hartman1-4/+4
2009-12-23Implement server side of PA_PKINIT_KX for anonymous draftSam Hartman1-2/+67
2009-12-23Always supply a padata item to the return callback in a preauth plugin so tha...Sam Hartman1-3/+6
2009-12-23Move symbols needed by pkinit pa_pkinit_k x to k5-int-pkinit.hSam Hartman2-11/+11
2009-12-23Client side of PA_PKINIT_KXSam Hartman2-1/+71
2009-12-23Fix prototypeSam Hartman1-0/+1
2009-12-23Add support for kadmin -nSam Hartman6-7/+55
2009-12-23Change kinit -n logic to support an interface for both fully andSam Hartman5-52/+101
2009-12-23For fully anonymous kadmin, the KDC will change the realm to theSam Hartman1-19/+20
2009-12-23Per discussion with Greg and Luke, hold an alias to the out_ccache.Sam Hartman1-9/+2
2009-12-23Use global constant for string components of anonymous and wellknownSam Hartman3-5/+9
2009-12-23Ignore transited realm checking for anonymous realmSam Hartman1-0/+6
2009-12-23Add kinit -n for anonymousSam Hartman1-7/+27
2009-12-23Permit the realm to be canonicalized from any realm to the anonymousSam Hartman1-0/+3
2009-12-23pkinit authentication only works for TGTSam Hartman1-2/+12
2009-12-23Implement support for the anonymous name type in GSS-APISam Hartman2-2/+18
2009-12-23Anonymous client side supportSam Hartman1-1/+9
2009-12-23Change krb5_get_ap_tag macro to remove warningsSam Hartman1-1/+1
2009-12-23KDC policy handling for anonymous tickets:Sam Hartman2-3/+8
2009-12-23Also update principal in replySam Hartman1-0/+1
2009-12-23Correct logic in client pluginSam Hartman1-1/+1
2009-12-23Set anonymous ticket flagSam Hartman2-2/+3
2009-12-23Update flag values for anonymous kdc option and ticket flagSam Hartman1-4/+2
2009-12-23Only check for anonymous if pkinit_identity is given a principal; the KDC doe...Sam Hartman1-1/+1
2009-12-23Because there is only one realm field in the kdc request, the KDCSam Hartman2-1/+17
2009-12-23Implement support for unsigned pkinit messagesSam Hartman4-41/+85
2009-12-23ad-initial-verified-cas logic brokenSam Hartman1-58/+5
2009-12-23Revert "In case of anonymous client principal, use the realm of the server"Sam Hartman1-29/+19
2009-12-23In case of anonymous client principal, use the realm of the serverSam Hartman1-19/+29
2009-12-23If the anonymous principal is used, then do not initialize theSam Hartman2-54/+60
2009-12-23Add cms_contentinfo_create to create the pkinit content info; this isSam Hartman2-21/+109
2009-12-23signed vs unsigned fixesSam Hartman3-13/+17
2009-12-23Add anonymous principal and name typeSam Hartman3-0/+40
2009-12-23anonymous branchSam Hartman0-0/+0
2009-12-14fast negotiation projecSam Hartman22-163/+790
2009-12-10Don't use sizeof(pointertype) to get the length of an allocated arrayTom Yu1-1/+1
2009-12-10Add comments to make it slightly clearer howGreg Hudson1-1/+2
2009-12-10Restructure the crypto checksum implementation to minimizeGreg Hudson46-1299/+864
2009-12-09Change file holder for krb5int_check_clockskew. Minor Style changes per code ...Zhanna Tsitkov2-41/+40
2009-12-08Remove dependency on /bin/csh in test suiteEzra Peisach1-2/+14
2009-12-08Mark and reindent lib/gssapi, with some exceptionsTom Yu65-312/+318
2009-12-07Mark lib/apputilsTom Yu2-0/+4
2009-12-07Mark and reindent util, with some exceptionsTom Yu53-3413/+3472
2009-12-07handle negative enctypes betterTom Yu2-4/+5
2009-12-06Initialize ihash_iov in case fall through to cleanup handler and tryEzra Peisach1-1/+1
2009-12-06Remove the ivec parameters from the keyhash provider functions, asGreg Hudson11-35/+26
2009-12-06Make dependGreg Hudson2-52/+64
2009-12-06Make the libk5crypto hash_provider interface take crypto_iov listsGreg Hudson29-490/+297
2009-12-06In the built-in des3 provider, remove the unused version ofGreg Hudson1-29/+3