aboutsummaryrefslogtreecommitdiff
path: root/src/kdc
AgeCommit message (Expand)AuthorFilesLines
2009-12-02Implement KDC side of protected negotiation:Sam Hartman5-21/+102
2009-12-02fix warningSam Hartman1-1/+1
2009-12-02As and TGS path: cliam to support FAST negotiation in ticket flag; restructur...Sam Hartman4-16/+20
2009-11-30Fix memory leakSam Hartman1-1/+2
2009-11-24KDC MUST NOT accept ap-request armor in FAST TGSSam Hartman1-0/+5
2009-11-22Consolidate Makefile variables now that we have only a single globalGreg Hudson2-116/+115
2009-11-21For the moment, test for nullity of pointers returned by k5allocGreg Hudson1-1/+1
2009-11-16Clean up some open-parenthesis problems, and reindentTom Yu6-116/+115
2009-11-14Constrained delegation without PAC supportGreg Hudson2-80/+652
2009-11-12Typo fixZhanna Tsitkov1-1/+1
2009-11-12Post-great-reindent check. Part IIZhanna Tsitkov2-173/+211
2009-11-12Restore the local variable typeZhanna Tsitkov1-1/+1
2009-11-12Post-great-reindent check. Part IZhanna Tsitkov6-284/+363
2009-11-04Use "unsigned short" instead of "u_short" in argument to SET macro;Ken Raeburn1-3/+8
2009-11-03Reindent after making fixes for emacs-23Tom Yu1-1/+1
2009-10-31make mark-cstyleTom Yu18-5676/+5687
2009-10-29In process_tgs_req, fully initialize e_data since we may copy it inGreg Hudson1-2/+1
2009-10-29remove times underflow/overflow checks, they break testsLuke Howard1-7/+2
2009-10-28Print a "starting..." message on stderr if running in nofork mode, forTom Yu1-0/+2
2009-10-27Heimdal DB bridge plugin for KDC back endGreg Hudson6-44/+121
2009-10-25Account lockoutGreg Hudson3-54/+4
2009-10-21Allow the constrained delegation authorization method to use the evidence tic...Luke Howard1-1/+5
2009-10-21simplify logic fix introduced in r22960 for S4U2SelfLuke Howard1-4/+2
2009-10-21remove some unneeded extensions from the Novell backend authdata SPILuke Howard3-41/+3
2009-10-21ensure that forwardable flag is propagated along S4U2Self referral pathLuke Howard1-1/+8
2009-10-21Increment authdata SPI to V2 (V1 was experimental) to account for additionalLuke Howard1-3/+3
2009-10-21Increment authdata SPI to V2 (V1 was experimental) to accountLuke Howard1-24/+24
2009-10-10Move destest to builtin/des, because it depends on overriding someTom Yu1-37/+44
2009-10-09Implement GSS naming extensions and authdata verificationGreg Hudson4-25/+33
2009-09-14Initialize several variables - so that on error cleanup - we do not try to freeEzra Peisach1-1/+3
2009-09-13Implement s4u extensionsGreg Hudson5-147/+464
2009-08-21Change "vague-errors" compile-time conditionals into run-timeKen Raeburn3-18/+22
2009-08-12 r22529@squish: raeburn | 2009-08-12 13:49:45 -0400Ken Raeburn4-39/+46
2009-08-03Get "make depend" to work in an unbuilt source tree, since bad depsGreg Hudson1-1/+1
2009-06-26Check for principal expiration prior to checking for passwordTom Yu1-16/+16
2009-05-24Fix vector initialization error in KDC preauth codeGreg Hudson1-3/+2
2009-05-22Remove spurious assertion in handle_authdataGreg Hudson1-1/+0
2009-05-20Add a comment to the r22168 change since it's not obvious why we'reGreg Hudson1-0/+11
2009-04-30Do not return PREAUTH_FAILED on unknown preauthSam Hartman1-9/+3
2009-04-27Move KRB5_KDB_OK_AS_DELEGATE from kdb_ext.h to kdb.h. Add kadminGreg Hudson1-4/+1
2009-04-16Send explicit salt for SALTTYPE_NORMAL keysGreg Hudson2-12/+19
2009-04-14Require fast_req checksum to be keyedSam Hartman1-1/+19
2009-04-09kdc: handle_referral_params does not return ENOMEM errorsEzra Peisach1-1/+1
2009-04-08Fall through on error returnEzra Peisach1-3/+4
2009-04-05Implement KDC side of TGS FASTSam Hartman1-3/+10
2009-04-04fix logic errorsSam Hartman1-1/+1
2009-04-03Handle authdata encrypted in subkeySam Hartman1-0/+7
2009-04-03Merge fast branch at 22166 onto trunkSam Hartman6-23/+123
2009-03-31Initialize request state in the TGS pathSam Hartman1-0/+5
2009-03-31make dependSam Hartman1-0/+11