aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2009-04-03Implement strengthen keyfastSam Hartman11-38/+114
2009-04-03Advertize FAST in supported preauth typesSam Hartman1-0/+11
2009-04-03Implement test forr ad-fx-armorSam Hartman2-0/+40
2009-04-03Implement KDC side cookie handlingSam Hartman3-4/+48
2009-04-03Implement PRF for RC4 enctypesSam Hartman3-4/+20
2009-04-03Client-side cookie supportSam Hartman3-7/+38
2009-04-01TGS error path can end up with null state if it fails too soon. InSam Hartman1-2/+3
2009-04-01Initialize request state in the TGS pathSam Hartman1-0/+5
2009-04-01Fix memory management errors detected through static analysis; thanks Greg Hu...Sam Hartman6-9/+11
2009-04-01fast_options is a KerberosFlags not an int32Sam Hartman3-3/+3
2009-03-26When FAST is enabled, do not use encrypted timestampSam Hartman1-2/+21
2009-03-26Implement Encrypted Challenge fast factorSam Hartman15-15/+620
2009-03-26Reject non-armor ticket use of AD-FX-ARMORSam Hartman3-1/+19
2009-03-26FAST response only when FAST in useSam Hartman1-2/+3
2009-03-26KDC TGS FAST supportSam Hartman4-11/+31
2009-03-26KDC handling of FAST responseSam Hartman4-13/+46
2009-03-26FAST encrypted response for clientSam Hartman4-17/+132
2009-03-26Do not include cookie in outer padata on clientSam Hartman2-9/+8
2009-03-26Remove FAST finish checksumSam Hartman10-47/+63
2009-03-26Pull the kdc_req_body out of the ASN.1 packet and pass in to beSam Hartman1-1/+7
2009-03-26Set status when kdc_find_fast fails in do_as_req.cSam Hartman1-2/+3
2009-03-26ap-request armor handling for KDCSam Hartman2-1/+109
2009-03-26Implement client AS armorSam Hartman8-6/+170
2009-03-26default to not retrying after error in client preauth loopSam Hartman1-0/+1
2009-03-26Integrate fast in KDC AS errorsSam Hartman1-5/+33
2009-03-26Client AS-req error handling for FASTSam Hartman6-22/+118
2009-03-26Implement free_fast_response and free_fast_finishedSam Hartman1-0/+19
2009-03-26Implement KDC side FAST responseSam Hartman3-0/+143
2009-03-26Free the request in process_as_req for parallelism with TGS case. This permit...Sam Hartman2-1/+3
2009-03-26Some fast free functionsSam Hartman2-0/+16
2009-03-26Integrate FAST in to client AS sendingSam Hartman4-7/+296
2009-03-26Integrate FAST into AS and TGSSam Hartman4-4/+32
2009-03-26Function to parse FAST for KDC requestsSam Hartman4-0/+151
2009-03-26defines for fast padata assignmentsSam Hartman1-0/+10
2009-03-26Add kdc_state field to krb5_kdc_reqSam Hartman3-0/+11
2009-03-26Add #defines for fast options and to keep track of unsupportedSam Hartman1-0/+4
2009-03-26Add KRB5KDC_UNKNOWN_FAST_CRITICAL_OPTIONSam Hartman1-1/+1
2009-03-26kdc_req_body in fast_req should be a pointerSam Hartman3-15/+30
2009-03-26pa_fx_fast_reply is a choice of sequence of encrypted dataSam Hartman3-23/+45
2009-03-26Define FAST encoders and decodersSam Hartman5-2/+238
2009-03-26FAST data structures for protocol messagesSam Hartman2-1/+37
2009-03-26Branch trunk for FAST projectSam Hartman0-0/+0
2009-03-25Update kdb5_util man page for mkey migration projectWill Fiveash1-7/+18
2009-03-24Revert r21880 which included k5-int.h in several pkinit source files.Greg Hudson5-19/+20
2009-03-20Install kadmin and kdb headersGreg Hudson5-0/+28
2009-03-17Fix error handling issue in ASN.1 decoderGreg Hudson1-1/+2
2009-03-16Verify return code from krb5_db_set_mkey_listZhanna Tsitkov2-5/+12
2009-03-16make dependSam Hartman7-110/+155
2009-03-16Implement tests for authdata functionsSam Hartman3-2/+114
2009-03-16Implement krb5int_find_authdataSam Hartman1-0/+89