aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2019-12-06Implement NegoExLuke Howard18-230/+2693
2019-12-06Qualify short hostnames when not using DNSGreg Hudson8-23/+106
2019-12-06Improve type safety of serialization codeGreg Hudson33-2588/+695
2019-11-26Various gssalloc fixesGreg Hudson8-8/+8
2019-11-26Install gssapi/gssapi_alloc.h properlyGreg Hudson2-1/+2
2019-11-23Simplify SPNEGO get_available_mechs()Luke Howard1-38/+14
2019-11-19Factor out mechglue union context creationGreg Hudson6-79/+64
2019-11-19Fix gss_set_sec_context_option() context creationLuke Howard1-0/+1
2019-11-19Fix kadmin addprinc -randkey -kvnoGreg Hudson1-1/+5
2019-11-13Use k5-buf.h integer helpers where appropriateGreg Hudson6-93/+44
2019-11-13Add k5-buf.h helpers for serializing integersGreg Hudson1-0/+54
2019-11-13Fix SPNEGO fallback context handlingGreg Hudson1-0/+1
2019-11-13Update test suite cert message digest to sha256Robbie Harwood7-271/+271
2019-11-13Fix minor errors in softpkcs11Robbie Harwood1-3/+4
2019-11-13Add enforce_ok_as_delegate settingViktor Dukhovni6-32/+39
2019-11-08Fix SPNEGO output parameter bugsGreg Hudson4-38/+60
2019-11-08Restrict SPNEGO acceptor mechs by cred acquisitionGreg Hudson1-8/+4
2019-11-03Simplify AS request time handling in KDCGreg Hudson2-25/+3
2019-11-03Record start time of AS requests earlier in KDCAndreas Schneider1-4/+5
2019-11-03Allow client canonicalization in non-krbtgt AS-REPIsaac Boukris2-7/+5
2019-10-23Work around glibc bug 11941 (dlclose assertion)Greg Hudson1-0/+15
2019-10-21Fix gssalloc_realloc() on WindowsGreg Hudson1-0/+3
2019-10-21Improve argument validation in some GSS APIsGreg Hudson19-59/+94
2019-10-21Fix minor leak when loading GSS mechanismsGreg Hudson1-0/+2
2019-10-21Accept GSS mechs which don't supply attributesGreg Hudson1-0/+4
2019-10-21Fix missing field in /etc/gss/mech documentationGreg Hudson1-9/+11
2019-10-21Fix t_otp.py for pyrad 2.2Greg Hudson1-0/+1
2019-10-06Fix typo in default GSS mech config documentationGreg Hudson1-1/+1
2019-10-01Log unknown enctypes as unsupported in KDCGreg Hudson1-8/+10
2019-09-27Remove some outdated iprop documentationGreg Hudson1-7/+1
2019-09-27Fix KDC crash when logging PKINIT enctypesGreg Hudson1-1/+1
2019-09-24Follow-up on krb5_gss_duplicate_name() null checkGreg Hudson1-2/+1
2019-09-23Correct a typo in database documentationДилян Палаузов1-1/+1
2019-09-20Update supported_enctypes documentationRobbie Harwood1-1/+1
2019-09-19Update LDAP KDB module documentationGreg Hudson8-360/+144
2019-09-19Add environment variable for GSS mech configGreg Hudson11-11/+51
2019-09-12Fix doc buildGreg Hudson1-0/+1
2019-09-11Remove null check in krb5_gss_duplicate_name()Robbie Harwood1-2/+1
2019-09-11Squash apparent forward-null in clnttcp_create()Robbie Harwood1-3/+3
2019-09-09Add tests for local and cross-realm RBCD requestsIsaac Boukris2-24/+583
2019-09-09Add minimal cross-realm support to test KDB moduleGreg Hudson1-11/+17
2019-09-09Fix authdata signatures for non-TGT AS-REQsIsaac Boukris4-39/+39
2019-09-09Add API to get client account name from PACIsaac Boukris5-8/+59
2019-09-09Add KDC support for RBCD requestsIsaac Boukris10-90/+387
2019-09-09Add KDC support functions for PA-PAC-OPTIONSIsaac Boukris2-0/+56
2019-09-09S4U2Proxy evidence tickets needn't be forwardableIsaac Boukris7-81/+53
2019-09-08Add RBCD client supportIsaac Boukris7-17/+345
2019-09-08Move S4U2Proxy client code to s4u_creds.cIsaac Boukris3-25/+143
2019-08-27Simplify krb5_dbe_def_search_enctype()Greg Hudson1-72/+45
2019-08-26Allow the KDB to see and modify auth indicatorsGreg Hudson9-34/+61