aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2011-04-11Merge branch 'master' into users/lhoward/saml2lhoward/saml2Luke Howard7-121/+174
2011-04-11cleanupLuke Howard1-2/+0
2011-04-11Merge branch 'master' into users/lhoward/saml2Luke Howard6-26/+60
2011-04-07Merge branch 'master' into users/lhoward/saml2Luke Howard3-193/+256
2011-04-06set xs:string/xs:base64Binary depending on LDAP syntaxLuke Howard1-8/+27
2011-04-06correctly format radius config continuation linesLuke Howard1-1/+1
2011-04-06Revert "use global server_creds for impersonator cred handle"Luke Howard1-8/+22
2011-04-06fix merge errorLuke Howard1-1/+0
2011-04-06Merge branch 'master' into users/lhoward/saml2Luke Howard5-18/+49
2011-04-04Merge branch 'master' into users/lhoward/saml2Luke Howard24-473/+826
2011-04-03use global server_creds for impersonator cred handleLuke Howard1-22/+8
2011-04-03Merge branch 'master' into users/lhoward/saml2Luke Howard5-16/+24
2011-04-03allow zero-valued attributesLuke Howard1-1/+1
2011-04-03remove trailing whitespaceLuke Howard3-7/+7
2011-04-03fix regression: 't log "Accepted" message to stdoutLuke Howard1-1/+1
2011-04-03Merge branch 'master' into users/lhoward/saml2Luke Howard9-344/+380
2011-04-03cleanupLuke Howard1-10/+10
2011-04-03parameterize constrained deleg target nameLuke Howard1-14/+54
2011-04-03Add an option to saml_sign for generating RADIUS AAA configurationLuke Howard1-1/+40
2011-04-03If we failed to verify the assertion, and we have informationLuke Howard1-3/+9
2011-04-03add PADL copyrights, this work is not sponsored by MITLuke Howard4-1/+126
2011-04-03cleanupLuke Howard1-2/+1
2011-04-02relax subject/authtime confirmationLuke Howard1-6/+20
2011-04-02add saml_sign appLuke Howard5-79/+305
2011-04-02fixes for constrained delegationLuke Howard1-16/+51
2011-04-02refactor krb5 plugin to use GSS_C_ATTR_SAML_ASSERTIONLuke Howard3-12/+13
2011-04-02add GSS_C_ATTR_SAML_ASSERTION constantLuke Howard4-6/+14
2011-04-02pass GSS_C_NT_ANONYMOUS for anonymous name typeLuke Howard1-6/+2
2011-04-02allow empty names when importing GSS_C_NT_ANONYMOUSLuke Howard1-4/+11
2011-04-02add some commentsLuke Howard1-0/+6
2011-04-02Don't include unverified assertions in TGTs, because weLuke Howard1-0/+25
2011-04-02Merge branch 'master' into users/lhoward/saml2Luke Howard8-2/+175
2011-04-02Determine which authdata sources to interrogate based on theLuke Howard1-3/+18
2011-04-02Revert "merge old SAML branch GSS stuff"Luke Howard9-182/+58
2011-04-02always confirm anonymous principalsLuke Howard3-30/+44
2011-04-02add anonymous S4U test to gss-serverLuke Howard1-31/+77
2011-04-02When doing S4U2Self for the anon principal, use the server realmLuke Howard1-4/+12
2011-04-02typo fixLuke Howard1-1/+1
2011-04-02Some work on validating third-party signed assertionsLuke Howard6-58/+307
2011-04-02Merge branch 'master' into users/lhoward/saml2Luke Howard13-327/+547
2011-04-01Support for transiting attributes between mechanismsLuke Howard1-2/+68
2011-04-01add Kerberos S4U test to gss-serverLuke Howard1-5/+300
2011-04-01only reset greeting if provided attribute is urn:greet:greetingLuke Howard1-0/+3
2011-04-01some fixes for SAML protocol transitionLuke Howard1-26/+40
2011-04-01verify desired and actual mech OIDs are equal before trying gss_duplicate_nameLuke Howard1-2/+7
2011-04-01test SAML S4U impersonationLuke Howard1-5/+11
2011-04-01Don't treat SAML authdata as KDC-issueda in KDCLuke Howard1-1/+0
2011-04-01allow unsigned assertionsLuke Howard1-4/+4
2011-04-01allow assertion to be NULLLuke Howard1-9/+16
2011-04-01s4u2proxy_set_attribute should only return EPERM for its own attributeLuke Howard1-8/+2