aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2020-09-07Use the term "primary KDC" in source and docsGreg Hudson46-337/+346
2020-09-07Suppress Leash error popup on MSLSA renew failureGreg Hudson1-2/+2
2020-09-02Harmonize macOS pack declarations with HeimdalGreg Hudson5-14/+14
2020-09-02make regenGreg Hudson4-183/+182
2020-09-02Unify kvno option documentationRobbie Harwood3-28/+35
2020-08-18Set lockdown attribute when creating LDAP KDBGreg Hudson1-1/+1
2020-08-07Refactor cache checking in TGS client codeGreg Hudson3-58/+55
2020-08-07Cache S4U2Proxy requests by second ticketIsaac Boukris7-85/+88
2020-08-07Expand dns_canonicalize_host=fallback supportGreg Hudson13-235/+459
2020-08-04Don't create hostbased principals in new KDBsGreg Hudson5-84/+12
2020-08-04Try kadmin/admin first in libkadm5clntGreg Hudson4-28/+36
2020-08-04Fix three configure tests for Xcode 12Greg Hudson2-3/+5
2020-08-04Fix leak in KERB_AP_OPTIONS_CBT server supportGreg Hudson1-10/+13
2020-07-22Fix token and type declarations in getdate.yGreg Hudson1-6/+4
2020-07-22Ignore bad enctypes in krb5_string_to_keysalts()Robbie Harwood1-3/+4
2020-07-22Allow gss_unwrap_iov() of unpadded RC4 tokensGreg Hudson1-6/+3
2020-07-07Avoid backward seeks when reading keytab filesJoshua Neuheisel2-1/+12
2020-07-06Avoid using LMDB environments across forksGreg Hudson5-10/+26
2020-07-01Add GSS_KRB5_NT_X509_CERT name typeIsaac Boukris11-5/+50
2020-06-29Trace plugin module loading errorsGreg Hudson2-2/+17
2020-06-29Fix KDC choice to send encrypted S4U_X509_USERGreg Hudson1-2/+1
2020-06-23Add three kvno options from Heimdal kgetcredGreg Hudson5-32/+187
2020-06-23Interop with Heimdal KDC for S4U2Self requestsIsaac Boukris1-7/+2
2020-06-15Prevent deletion of K/MGreg Hudson2-0/+10
2020-06-15Try to find <target>-ar when cross compilingNikhil Benesch1-5/+1
2020-06-13Improve negoex_parse_token() code hygieneRobbie Harwood1-1/+1
2020-06-08Omit PA_FOR_USER if we can't compute its checksumIsaac Boukris1-0/+7
2020-06-08Set pw_expiration during LDAP loadGreg Hudson2-2/+8
2020-06-02Fix typo in t_renew.pyRobbie Harwood1-1/+2
2020-05-29Remove resolver test utilityGreg Hudson8-475/+4
2020-05-29Default dns_canonicalize_hostname to "fallback"Greg Hudson13-74/+60
2020-05-29Add static object build rules for AESNI sourcesNikhil Benesch1-2/+2
2020-05-29Return GSS_S_NO_CRED from krb5 gss_acquire_credGreg Hudson3-11/+11
2020-05-27Fix doc buildGreg Hudson1-0/+2
2020-05-21Fix SPNEGO acceptor mech filteringGreg Hudson1-1/+1
2020-05-20Add channel bindings testsIsaac Boukris9-29/+238
2020-05-20Pass channel bindings through SPNEGOIsaac Boukris3-40/+43
2020-05-20Add client_aware_channel_bindings optionIsaac Boukris3-80/+92
2020-05-20Implement KERB_AP_OPTIONS_CBT (server side)Isaac Boukris2-1/+45
2020-05-20Implement GSS_C_CHANNEL_BOUND_FLAGAlexander Scheel2-5/+15
2020-05-20Refactor krb5 GSS checksum handlingAlexander Scheel1-205/+179
2020-05-15Fix typo ("in in") in the ksu man pageRobbie Harwood2-2/+2
2020-05-15Add KDC helpers for current key and kvnoGreg Hudson7-67/+44
2020-05-14Prevent use of invalid local TGT keyGreg Hudson1-5/+5
2020-05-13Add stubs for some removed replay cache functionsGreg Hudson2-0/+40
2020-05-13Add KRB5_PRINCIPAL_PARSE_NO_DEF_REALM flagGreg Hudson2-6/+5
2020-05-07Omit KDC indicator check for S4U2Self requestsGreg Hudson1-7/+7
2020-05-07Stop reporting krb5 mech from IAKERBGreg Hudson1-8/+6
2020-04-30Fix overzealous SPNEGO src_name/deleg_cred releaseGreg Hudson1-2/+2
2020-04-28Pass gss_localname() through SPNEGOGreg Hudson2-1/+16