aboutsummaryrefslogtreecommitdiff
path: root/src/kdc/do_tgs_req.c
AgeCommit message (Expand)AuthorFilesLines
2022-01-27Implement replaced_reply_key input to issue_pac()Greg Hudson1-1/+1
2022-01-12Replace AD-SIGNEDPATH with minimal PACsGreg Hudson1-73/+58
2021-12-05Issue an error from KDC on S4U2Self failuresAndreas Schneider1-3/+2
2021-08-19Fix KDC null deref on TGS inner body null serverGreg Hudson1-0/+5
2021-07-01Fix many unlikely memory leaksRobbie Harwood1-14/+13
2020-10-29Move more KDC checks to validate_tgs_request()Greg Hudson1-81/+56
2020-10-02Minimize usage of tgs_server in KDCGreg Hudson1-4/+12
2020-09-30Avoid passing DB entry structures in KDCGreg Hudson1-1/+1
2020-09-22Allow aliases when matching U2U second ticketIsaac Boukris1-1/+1
2020-05-15Add KDC helpers for current key and kvnoGreg Hudson1-21/+3
2020-05-07Omit KDC indicator check for S4U2Self requestsGreg Hudson1-7/+7
2020-02-11Always use S4U2Proxy second ticket parsed authdataIsaac Boukris1-3/+9
2019-12-28Remove KRB5_KDB_FLAG_ALIAS_OKIsaac Boukris1-1/+0
2019-09-09Add KDC support for RBCD requestsIsaac Boukris1-47/+71
2019-08-26Allow the KDB to see and modify auth indicatorsGreg Hudson1-7/+2
2019-08-26Track first local TGT key in KDC codeGreg Hudson1-4/+7
2019-08-20Change definition of KRB5_KDB_FLAG_CROSS_REALMIsaac Boukris1-5/+5
2019-08-20Remove KRB5_KDB_XREALM_NON_TRANSITIVE codeGreg Hudson1-8/+0
2018-11-20Clear forwardable flag instead of denying requestGreg Hudson1-47/+11
2018-10-12Allow referrals for cross-realm S4U2Self requestsIsaac Boukris1-9/+3
2018-04-23Fix KDC null dereference on large TGS repliesRobbie Harwood1-18/+6
2018-03-02Improve KDC encrypting key memory managementGreg Hudson1-8/+8
2018-03-02Fix KDC encrypting key memory leak on some errorsGreg Hudson1-2/+3
2017-08-29Don't set ctime in KDC error repliesGreg Hudson1-1/+1
2017-08-18Add KDC policy pluggable interfaceRobbie Harwood1-0/+6
2017-07-24Simplify KDC status assignmentGreg Hudson1-40/+12
2017-07-24Prevent KDC unset status assertion failuresGreg Hudson1-1/+2
2017-05-16Make timestamp manipulations y2038-safeGreg Hudson1-3/+3
2017-04-20Initialize some magic fieldsMartin Kittel1-0/+1
2016-03-01Fix KDC memory leak on failed S4U2Proxy requestsGreg Hudson1-0/+1
2016-03-01Fix memory leak on error in KDC decrypt_2ndtkt()Greg Hudson1-1/+3
2015-07-22Enforce auth indicator restrictions in KDCGreg Hudson1-0/+6
2015-07-22Propagate auth indicators in TGS requestsGreg Hudson1-1/+14
2015-07-22Add authentication indicators in AS-REQsGreg Hudson1-0/+1
2015-06-15Use local TGT for AD-SIGNTICKET processingGreg Hudson1-1/+1
2015-06-15Load local TGT in KDC requestsGreg Hudson1-0/+9
2015-06-15Rename krbtgt variable in KDC codeGreg Hudson1-9/+11
2015-03-19Process TGS authdata after transited in KDCGreg Hudson1-24/+18
2015-03-18Fix renewable ticket lifetimesGreg Hudson1-1/+4
2015-02-02Remove starttime hack in EncTicketPart decoderGreg Hudson1-6/+1
2014-04-28Refactor KDC option/flag processingTom Yu1-35/+11
2014-03-18Fix returning KDB_NOENTRY in find_alternate_tgs()Nalin Dahyabhai1-1/+1
2014-02-19Make KDC "status" statements more homogeneousZhanna Tsitkov1-8/+8
2013-12-31Fix possible null deref in previousTom Yu1-3/+4
2013-12-30Log service princ in KDC more reliablyrbasch1-0/+5
2013-10-04KDC Audit infrastructure and plugin implementationZhanna Tsitkov1-3/+78
2013-10-04Remove unneeded variable enc_tkt_transitedBen Kaduk1-7/+2
2013-10-04Zero out stack variables in process_tgs_req()Ben Kaduk1-4/+5
2013-09-23Err codes in KRB_ERROR protocol messages are < 128Zhanna Tsitkov1-1/+1
2013-09-03Stop modifying TGS requests for referralsGreg Hudson1-17/+0