aboutsummaryrefslogtreecommitdiff
path: root/src/kdc
AgeCommit message (Expand)AuthorFilesLines
2015-10-28Zap secure cookie contents when freeingGreg Hudson1-4/+8
2015-10-26Use RUN_TEST and fix installed krb5.conf usesGreg Hudson1-2/+1
2015-09-17make dependTom Yu1-4/+31
2015-09-14Fix KDC client referralsGreg Hudson1-1/+1
2015-08-27Add etype-info2 to MORE_PREAUTH_DATA_REQUIREDGreg Hudson1-0/+52
2015-08-27Refactor finish_check_padata() in KDCGreg Hudson1-36/+37
2015-08-26Add secure cookie supportGreg Hudson5-92/+358
2015-07-22Enforce auth indicator restrictions in KDCGreg Hudson4-0/+53
2015-07-22Propagate auth indicators in TGS requestsGreg Hudson3-1/+60
2015-07-22Add authentication indicators in AS-REQsGreg Hudson4-0/+53
2015-07-22Add kdcpreauth callback for auth indicatorsGreg Hudson3-1/+13
2015-07-22Add KDC CAMMAC and auth indicator functionsGreg Hudson4-0/+346
2015-07-22Filter CAMMAC authdata from non-KDC sourcesGreg Hudson1-0/+2
2015-07-09Fix kdcpreauth counting bugGreg Hudson1-1/+1
2015-07-08Test client_keyblock kdcpreauth callbackGreg Hudson1-1/+1
2015-07-08Add client_keyblock kdcpreauth callbackGreg Hudson1-2/+9
2015-07-08Only include one key in etype-infoGreg Hudson3-254/+104
2015-06-15Fix make_signedpath_checksum() initialization bugGreg Hudson1-1/+1
2015-06-15Use local TGT for AD-SIGNTICKET processingGreg Hudson4-40/+75
2015-06-15Load local TGT in KDC requestsGreg Hudson4-0/+64
2015-06-15Rename krbtgt variable in KDC codeGreg Hudson5-27/+41
2015-06-15Modernize kdc_authdata.cGreg Hudson1-388/+282
2015-06-15Use new KDC authdata interface in kdc_authdata.cGreg Hudson1-245/+65
2015-06-15Get rid of static KDC authdata systemsGreg Hudson1-260/+123
2015-04-02Make all Python test scripts executableGreg Hudson2-0/+0
2015-03-19Process TGS authdata after transited in KDCGreg Hudson1-24/+18
2015-03-18Fix renewable ticket lifetimesGreg Hudson1-1/+4
2015-02-02Remove starttime hack in EncTicketPart decoderGreg Hudson2-13/+11
2015-01-28Support KDC_ERR_MORE_PREAUTH_DATA_REQUIREDNathaniel McCallum1-0/+2
2014-07-08Include autoconf.h before system headersGreg Hudson2-12/+8
2014-06-27Fix KDC worker process argument parsingGreg Hudson1-2/+4
2014-06-16Tidy up k5-int.h variable name constantsGreg Hudson1-2/+2
2014-06-10Simplify ticket retrieval from AP-REQsGreg Hudson1-26/+22
2014-06-10In KDC, log client principal in bad header ticketrbasch1-2/+18
2014-06-05Use k5_setmsgGreg Hudson3-30/+24
2014-04-28Refactor KDC option/flag processingTom Yu3-50/+82
2014-03-18Fix returning KDB_NOENTRY in find_alternate_tgs()Nalin Dahyabhai1-1/+1
2014-02-19Make KDC "status" statements more homogeneousZhanna Tsitkov3-21/+35
2013-12-31Fix possible null deref in previousTom Yu1-3/+4
2013-12-30Log service princ in KDC more reliablyrbasch2-12/+18
2013-12-20make dependGreg Hudson1-0/+13
2013-12-20Move kdc log routines into a separate fileZhanna Tsitkov3-198/+229
2013-12-10make dependTom Yu1-15/+30
2013-11-04Multi-realm KDC null deref [CVE-2013-1418]Tom Yu1-0/+3
2013-11-04Clean up the code to eliminate some clang warningsBen Kaduk1-2/+2
2013-10-04KDC Audit infrastructure and plugin implementationZhanna Tsitkov6-5/+552
2013-10-04Remove unneeded variable enc_tkt_transitedBen Kaduk1-7/+2
2013-10-04Zero out stack variables in process_tgs_req()Ben Kaduk1-4/+5
2013-09-25Support authoritative KDB check_transited methodsGreg Hudson1-8/+6
2013-09-23Re-factoring of service processing code in AS-REQZhanna Tsitkov1-12/+12