aboutsummaryrefslogtreecommitdiff
path: root/src/lib/krb5/krb/get_in_tkt.c
AgeCommit message (Expand)AuthorFilesLines
2023-07-16Defer primary KDC lookupsGreg Hudson1-21/+66
2023-01-23Don't issue session keys with deprecated enctypesGreg Hudson1-11/+20
2022-09-27Add and use ts_interval() helperGreg Hudson1-8/+7
2022-01-27Avoid passing null for asprintf stringsGreg Hudson1-3/+2
2021-08-25Perform atomic ccache refreshes when possibleGreg Hudson1-25/+58
2021-02-11Infer name type when creating principalsFraser Tweedale1-6/+1
2020-12-18Add support for start_realm cache configGreg Hudson1-1/+1
2020-09-18Warn when des3-cbc-sha1 is used for initial authGreg Hudson1-0/+21
2020-09-07Use the term "primary KDC" in source and docsGreg Hudson1-11/+11
2020-08-07Expand dns_canonicalize_host=fallback supportGreg Hudson1-3/+4
2020-04-08Fix typos in commentsGreg Hudson1-1/+1
2020-04-01Do expiration warnings for all init_creds APIsSumit Bose1-0/+112
2019-11-03Allow client canonicalization in non-krbtgt AS-REPIsaac Boukris1-7/+2
2019-06-10Use new pa-data helpers where appropriateGreg Hudson1-43/+14
2019-03-05Improve S4U2Self realm identification internalsGreg Hudson1-0/+59
2018-06-14Add flag to disable encrypted timestamp on clientGreg Hudson1-0/+23
2018-04-09Restrict pre-authentication fallback casesGreg Hudson1-13/+8
2018-03-19Add PKINIT client support for freshness tokenGreg Hudson1-4/+8
2017-09-27Abort client preauth on keyboard interruptGreg Hudson1-0/+3
2017-09-08Limit ticket lifetime to 2^31-1 secondsGreg Hudson1-3/+3
2017-05-18Use krb5_timestamp where appropriateGreg Hudson1-1/+1
2017-05-16Make timestamp manipulations y2038-safeGreg Hudson1-27/+11
2017-04-26Use a random nonce in TGS requestsGreg Hudson1-18/+1
2017-04-24Fix in_clock_skew() and use it in AS client codeGreg Hudson1-2/+2
2017-02-23Continue after KDC_ERR_PREAUTH_FAILEDGreg Hudson1-9/+36
2017-02-23Continue preauth after client-side failuresGreg Hudson1-17/+32
2017-02-23Preserve method data in get_in_tkt.cGreg Hudson1-23/+48
2017-02-02Track preauth failures instead of triesGreg Hudson1-3/+0
2017-02-02Remove sent_nontrivial_preauth fieldGreg Hudson1-4/+1
2017-02-02Simplify k5_preauth_tryagain()Greg Hudson1-13/+7
2017-02-02Adjust processing of pa_type ccache configGreg Hudson1-30/+31
2017-01-26Document and check init_creds context requirementGreg Hudson1-1/+5
2017-01-26Properly scope per-request preauth dataGreg Hudson1-6/+6
2016-08-18Refactor AS reply decryption code in get_in_tkt.cGreg Hudson1-73/+95
2016-08-18Use responder for non-preauth AS requestsGreg Hudson1-1/+23
2016-05-31Fix unlikely pointer error in get_in_tkt.cGreg Hudson1-3/+3
2016-04-27Add krb5_get_init_creds_opt_set_pac_request()Andreas Schneider1-0/+28
2016-04-27Generalize request_enc_pa_rep() in get_in_tkt.cAndreas Schneider1-5/+17
2015-08-11Add KDC_ERR_PREAUTH_EXPIRED supportGreg Hudson1-0/+5
2015-08-11Simplify get_in_tkt.c restart handlingGreg Hudson1-102/+40
2015-07-29Fix uncommon leak in krb5_init_creds_step()Greg Hudson1-0/+2
2015-01-28Support KDC_ERR_MORE_PREAUTH_DATA_REQUIREDNathaniel McCallum1-5/+8
2015-01-23Do not loop on principal unknown errorsSimo Sorce1-27/+13
2014-12-07Use new error message wrapping APIsNicolas Williams1-6/+2
2014-10-22Report output ccache errors getting initial credsGreg Hudson1-1/+0
2014-07-08Include autoconf.h before system headersGreg Hudson1-2/+0
2014-06-05Use k5_setmsgGreg Hudson1-7/+6
2014-03-13Don't leak the per-request preauth contextNalin Dahyabhai1-0/+1
2014-03-05Improve extended gic option supportGreg Hudson1-59/+43
2014-02-18Support referrals from Windows Server 2003Nate Rosenblum1-3/+32