aboutsummaryrefslogtreecommitdiff
path: root/src/kdc/do_as_req.c
AgeCommit message (Expand)AuthorFilesLines
2020-10-02Minimize usage of tgs_server in KDCGreg Hudson1-12/+9
2020-09-30Avoid passing DB entry structures in KDCGreg Hudson1-2/+2
2020-05-15Add KDC helpers for current key and kvnoGreg Hudson1-24/+5
2020-02-21Fix AS-REQ checking of KDB-modified indicatorsGreg Hudson1-7/+7
2019-12-28Remove KRB5_KDB_FLAG_ALIAS_OKIsaac Boukris1-6/+1
2019-12-28Do not always canonicalize enterprise principalsIsaac Boukris1-5/+4
2019-11-03Simplify AS request time handling in KDCGreg Hudson1-11/+3
2019-11-03Record start time of AS requests earlier in KDCAndreas Schneider1-4/+5
2019-09-09Add KDC support for RBCD requestsIsaac Boukris1-1/+1
2019-08-26Allow the KDB to see and modify auth indicatorsGreg Hudson1-1/+1
2019-08-26Track first local TGT key in KDC codeGreg Hudson1-23/+20
2019-07-11Fix typosAntoine Cœur1-1/+1
2019-03-13Add KDC support for X.509 S4U2Self requestsIsaac Boukris1-2/+21
2018-11-20Clear forwardable flag instead of denying requestGreg Hudson1-14/+5
2018-03-19Add PKINIT KDC support for freshness tokenGreg Hudson1-0/+2
2017-08-29Don't set ctime in KDC error repliesGreg Hudson1-1/+1
2017-08-18Add KDC policy pluggable interfaceRobbie Harwood1-0/+7
2017-07-24Simplify KDC status assignmentGreg Hudson1-39/+12
2017-07-24Prevent KDC unset status assertion failuresGreg Hudson1-2/+2
2017-06-05Pass local address to DAL audit_as_reqAndreas Schneider1-7/+10
2017-06-05Consistently name and constify address variablesAndreas Schneider1-9/+10
2017-05-16Make timestamp manipulations y2038-safeGreg Hudson1-1/+1
2017-04-20Initialize some magic fieldsMartin Kittel1-0/+2
2016-09-23Fix unlikely leak in KDC AS-REQ error pathGreg Hudson1-1/+1
2015-09-14Fix KDC client referralsGreg Hudson1-1/+1
2015-08-26Add secure cookie supportGreg Hudson1-7/+33
2015-07-22Enforce auth indicator restrictions in KDCGreg Hudson1-0/+7
2015-07-22Add authentication indicators in AS-REQsGreg Hudson1-0/+1
2015-07-22Add kdcpreauth callback for auth indicatorsGreg Hudson1-0/+3
2015-07-08Only include one key in etype-infoGreg Hudson1-33/+55
2015-06-15Use local TGT for AD-SIGNTICKET processingGreg Hudson1-0/+1
2015-06-15Load local TGT in KDC requestsGreg Hudson1-0/+11
2015-06-15Rename krbtgt variable in KDC codeGreg Hudson1-2/+2
2014-04-28Refactor KDC option/flag processingTom Yu1-14/+4
2014-02-19Make KDC "status" statements more homogeneousZhanna Tsitkov1-13/+13
2013-12-30Log service princ in KDC more reliablyrbasch1-12/+13
2013-10-04KDC Audit infrastructure and plugin implementationZhanna Tsitkov1-2/+47
2013-09-23Re-factoring of service processing code in AS-REQZhanna Tsitkov1-12/+12
2013-09-23Err codes in KRB_ERROR protocol messages are < 128Zhanna Tsitkov1-1/+1
2013-09-03Support FAST hide-client-names optionGreg Hudson1-0/+4
2013-06-06Refactor KDC renewable ticket handlingGreg Hudson1-26/+3
2013-05-03Make AS requests work with no client keyGreg Hudson1-16/+20
2013-01-15Remove KDC macros for realm config fieldsGreg Hudson1-1/+1
2013-01-10Get rid of adm.hGreg Hudson1-1/+1
2012-10-15Eliminate some KDC globalsTom Yu1-13/+21
2012-10-15Set pointers to NULL after freeing themZhanna Tsitkov1-0/+1
2012-09-12Map CANTLOCK_DB to SVC_UNAVAILABLE in krb5kdcNicolas Williams1-0/+4
2012-08-22Remove dead code in do_as_req.cZhanna Tsitkov1-12/+0
2012-04-26Remove orphaned Apple PKINIT supportGreg Hudson1-21/+0
2012-03-22Suppress some gcc uninitialized variable warningsGreg Hudson1-0/+1