aboutsummaryrefslogtreecommitdiff
path: root/src/lib/krb5/krb
AgeCommit message (Expand)AuthorFilesLines
2022-11-05Fix integer overflows in PAC parsingGreg Hudson2-2/+25
2021-02-17Restore krb5_set_default_tgs_ktypes()Greg Hudson1-0/+11
2021-01-11make regenGreg Hudson1-1/+1
2021-01-08Revert dns_canonicalize_hostname default to trueGreg Hudson1-1/+1
2021-01-08Implement fallback for GSS acceptor namesGreg Hudson3-4/+20
2021-01-08Add support for start_realm cache configGreg Hudson2-8/+22
2020-11-03Allow KDC to canonicalize realm in TGS clientGreg Hudson2-7/+8
2020-10-22Fix minor static analysis defectsRobbie Harwood1-1/+0
2020-09-18Warn when des3-cbc-sha1 is used for initial authGreg Hudson1-0/+21
2020-09-07Fix KRB5_GC_CACHED for S4U2Self requestsGreg Hudson1-6/+7
2020-09-07Rename master_kdc and iprop_master_ulogsizeGreg Hudson1-1/+1
2020-09-07Use the term "primary KDC" in source and docsGreg Hudson8-58/+57
2020-09-02Harmonize macOS pack declarations with HeimdalGreg Hudson1-2/+2
2020-08-07Refactor cache checking in TGS client codeGreg Hudson3-58/+55
2020-08-07Cache S4U2Proxy requests by second ticketIsaac Boukris2-28/+35
2020-08-07Expand dns_canonicalize_host=fallback supportGreg Hudson7-128/+199
2020-06-29Trace plugin module loading errorsGreg Hudson1-2/+12
2020-06-23Interop with Heimdal KDC for S4U2Self requestsIsaac Boukris1-7/+2
2020-06-08Omit PA_FOR_USER if we can't compute its checksumIsaac Boukris1-0/+7
2020-05-29Default dns_canonicalize_hostname to "fallback"Greg Hudson1-1/+1
2020-05-20Add client_aware_channel_bindings optionIsaac Boukris1-80/+85
2020-05-13Add KRB5_PRINCIPAL_PARSE_NO_DEF_REALM flagGreg Hudson1-6/+4
2020-04-08Fix typos in commentsGreg Hudson10-15/+15
2020-04-01Do expiration warnings for all init_creds APIsSumit Bose4-130/+161
2020-03-26make regenGreg Hudson1-202/+221
2020-01-29Remove private mutators for context enctypesRobbie Harwood5-82/+11
2020-01-28Zero length fields when freeing object contentsIsaac Boukris1-4/+4
2020-01-24Honor transited-policy-checked flag in serversGreg Hudson1-4/+7
2020-01-23Apply permitted_enctypes to KDC request enctypesRobbie Harwood1-66/+78
2020-01-15Fix S4U client authdata handlingIsaac Boukris1-0/+19
2020-01-07Fix handling of invalid CAMMAC service verifierJeffrey Arbuckle1-0/+2
2020-01-07Work around macOS SIP in the test suiteGreg Hudson4-2/+5
2020-01-05Fix error return case in serialization codeGreg Hudson1-1/+4
2019-12-06Improve type safety of serialization codeGreg Hudson15-1520/+478
2019-11-13Add enforce_ok_as_delegate settingViktor Dukhovni2-0/+7
2019-11-03Allow client canonicalization in non-krbtgt AS-REPIsaac Boukris1-7/+2
2019-09-09Add API to get client account name from PACIsaac Boukris1-8/+34
2019-09-09S4U2Proxy evidence tickets needn't be forwardableIsaac Boukris1-11/+5
2019-09-08Add RBCD client supportIsaac Boukris2-16/+299
2019-09-08Move S4U2Proxy client code to s4u_creds.cIsaac Boukris3-25/+143
2019-07-11Fix typosAntoine Cœur4-5/+5
2019-06-10Verify PAC client name independently of name-typeIsaac Boukris2-22/+56
2019-06-10Use new pa-data helpers where appropriateGreg Hudson1-43/+14
2019-06-10Add new internal pa-data helpersGreg Hudson3-17/+130
2019-06-07Update HTTP linksMichael Mattioli1-1/+1
2019-06-04Simplify and modernize replay cache interfaceGreg Hudson5-51/+17
2019-05-31Add KRB5RCACHENAME and default_rcache_nameGreg Hudson1-52/+6
2019-05-31Add tag to krb5_donot_replayGreg Hudson1-3/+7
2019-05-29Remove support for no-flags SAM-2 preauthRobbie Harwood1-29/+11
2019-05-28Remove support for single-DES and CRCRobbie Harwood6-76/+8
generated by cgit v1.1 at 2024-08-03 16:15:29 +0000