aboutsummaryrefslogtreecommitdiff
path: root/src/lib/krb5
AgeCommit message (Expand)AuthorFilesLines
2020-09-18Warn when des3-cbc-sha1 is used for initial authGreg Hudson1-0/+21
2020-09-07Fix KRB5_GC_CACHED for S4U2Self requestsGreg Hudson1-6/+7
2020-09-07Rename master_kdc and iprop_master_ulogsizeGreg Hudson2-7/+12
2020-09-07Use the term "primary KDC" in source and docsGreg Hudson13-101/+103
2020-09-02Harmonize macOS pack declarations with HeimdalGreg Hudson1-2/+2
2020-08-07Refactor cache checking in TGS client codeGreg Hudson3-58/+55
2020-08-07Cache S4U2Proxy requests by second ticketIsaac Boukris5-51/+58
2020-08-07Expand dns_canonicalize_host=fallback supportGreg Hudson9-193/+377
2020-07-07Avoid backward seeks when reading keytab filesJoshua Neuheisel1-0/+4
2020-06-29Trace plugin module loading errorsGreg Hudson1-2/+12
2020-06-23Interop with Heimdal KDC for S4U2Self requestsIsaac Boukris1-7/+2
2020-06-08Omit PA_FOR_USER if we can't compute its checksumIsaac Boukris1-0/+7
2020-05-29Default dns_canonicalize_hostname to "fallback"Greg Hudson1-1/+1
2020-05-20Add client_aware_channel_bindings optionIsaac Boukris1-80/+85
2020-05-13Add stubs for some removed replay cache functionsGreg Hudson2-0/+40
2020-05-13Add KRB5_PRINCIPAL_PARSE_NO_DEF_REALM flagGreg Hudson1-6/+4
2020-04-08Correct formatting of trace log microsecondsGreg Hudson1-2/+2
2020-04-08Fix typos in commentsGreg Hudson24-37/+37
2020-04-01Do expiration warnings for all init_creds APIsSumit Bose4-130/+161
2020-03-26make regenGreg Hudson2-211/+230
2020-03-05Fix null dereference qualifying short hostnamesGreg Hudson1-2/+3
2020-02-27Allow certauth modules to set hw-authent flagGreg Hudson1-0/+1
2020-01-29Remove private mutators for context enctypesRobbie Harwood6-84/+11
2020-01-28Zero length fields when freeing object contentsIsaac Boukris1-4/+4
2020-01-24Honor transited-policy-checked flag in serversGreg Hudson1-4/+7
2020-01-23Apply permitted_enctypes to KDC request enctypesRobbie Harwood1-66/+78
2020-01-15Fix S4U client authdata handlingIsaac Boukris1-0/+19
2020-01-07Fix handling of invalid CAMMAC service verifierJeffrey Arbuckle1-0/+2
2020-01-07Work around macOS SIP in the test suiteGreg Hudson4-2/+5
2020-01-05Fix error return case in serialization codeGreg Hudson1-1/+4
2019-12-06Qualify short hostnames when not using DNSGreg Hudson3-1/+67
2019-12-06Improve type safety of serialization codeGreg Hudson25-2316/+505
2019-11-13Use k5-buf.h integer helpers where appropriateGreg Hudson2-25/+8
2019-11-13Add enforce_ok_as_delegate settingViktor Dukhovni2-0/+7
2019-11-03Allow client canonicalization in non-krbtgt AS-REPIsaac Boukris1-7/+2
2019-09-09Add API to get client account name from PACIsaac Boukris2-8/+35
2019-09-09S4U2Proxy evidence tickets needn't be forwardableIsaac Boukris1-11/+5
2019-09-08Add RBCD client supportIsaac Boukris4-16/+323
2019-09-08Move S4U2Proxy client code to s4u_creds.cIsaac Boukris3-25/+143
2019-08-15Fix KCM client time offset propagationRobbie Harwood1-1/+1
2019-08-05Skip URI tests when using asanGreg Hudson1-3/+7
2019-08-01Clean up replay cache testsGreg Hudson3-279/+10
2019-08-01Handle all-zero tags in file2 rcache typeGreg Hudson1-2/+2
2019-07-12Don't error on invalid enctypes in keytabRobbie Harwood1-22/+5
2019-07-11Fix typosAntoine Cœur9-10/+10
2019-06-26Remove PKINIT draft 9 ASN.1 code and typesGreg Hudson2-88/+0
2019-06-10Verify PAC client name independently of name-typeIsaac Boukris2-22/+56
2019-06-10Use new pa-data helpers where appropriateGreg Hudson1-43/+14
2019-06-10Add new internal pa-data helpersGreg Hudson4-17/+135
2019-06-10Make rcache file2 code slightly more robustGreg Hudson1-9/+21
generated by cgit v1.1 at 2024-07-09 03:26:39 +0000