aboutsummaryrefslogtreecommitdiff
path: root/src/plugins
AgeCommit message (Expand)AuthorFilesLines
2013-08-15Add hostrealm interface testsGreg Hudson4-0/+234
2013-07-22Don't ask empty responder questions in PKINITNalin Dahyabhai1-0/+7
2013-07-17Add the error to some PKINIT NSS debug messagesNalin Dahyabhai1-10/+14
2013-07-17Support PKINIT OpenSSL deferred identity promptingNalin Dahyabhai1-55/+159
2013-07-17Support PKINIT NSS deferred identity promptingNalin Dahyabhai1-60/+252
2013-07-17Pass PKINIT identity prompts to the responder cbNalin Dahyabhai2-19/+218
2013-07-17Make the PKINIT NSS path also check for NULL certsNalin Dahyabhai1-1/+6
2013-07-17Use PKCS11_MODNAME for NSS PKINIT by defaultNalin Dahyabhai1-0/+7
2013-07-17Add support for PKINIT deferring identity promptsNalin Dahyabhai6-0/+226
2013-07-17Split pkinit_identity_initialize into two phasesNalin Dahyabhai7-15/+97
2013-07-17Fix OTP KDC module get_string error handlingGreg Hudson1-2/+4
2013-07-15Avoid allocating zero key_data structuresGreg Hudson1-1/+2
2013-07-15Fix a leak when parsing PKINIT cert SANs with NSSNalin Dahyabhai1-0/+1
2013-07-15Don't leak PKINIT CMS signed data certs and CRLsNalin Dahyabhai1-2/+4
2013-07-15Don't leak the reply key's memory during PKINITNalin Dahyabhai1-1/+3
2013-07-11Use k5calloc instead of k5alloc where appropriateGreg Hudson3-12/+14
2013-07-11Add server-side otp preauth pluginNathaniel McCallum6-0/+1145
2013-06-27Fix uninitialized variable bugsGreg Hudson1-0/+1
2013-06-27Add tests for pwqual modules and plugin orderingGreg Hudson4-0/+260
2013-06-07Fix various warningsGreg Hudson11-53/+46
2013-05-31Fix warnings in dbtest.cGilles Espinasse1-20/+38
2013-05-31Link dbtest with libkrb5supportGreg Hudson1-2/+2
2013-05-16Reduce boilerplate in makefilesGreg Hudson17-182/+4
2013-05-14Assume mutex locking cannot failGreg Hudson4-31/+13
2013-05-13Fixes for leaking of refcounted resourcesNalin Dahyabhai1-11/+22
2013-05-13In PKINIT NSS crypto, support encrypted PEM keysNalin Dahyabhai1-0/+26
2013-05-13Get better at locating the just-loaded certificateNalin Dahyabhai1-58/+35
2013-05-13In PKINIT NSS crypto code, load certificates firstNalin Dahyabhai1-61/+62
2013-05-10When DEBUG=1, log why we fail to log in to a tokenNalin Dahyabhai1-4/+6
2013-05-10Traverse tokens like we do with OpenSSL for NSSNalin Dahyabhai1-15/+14
2013-05-10Only call SEC_PKCS12DecoderFinish() onceNalin Dahyabhai1-1/+0
2013-05-10Make the text of NSS's prompts look like OpenSSL'sNalin Dahyabhai1-4/+8
2013-05-10Don't fail if a candidate certificate has no SANsNalin Dahyabhai1-6/+2
2013-05-10Fix type mismatch in db2_exp.cGreg Hudson1-1/+1
2013-05-08Improve LDAP password file error messagesGreg Hudson1-2/+6
2013-05-08Make reassembled PKCS11 names parseableNalin Dahyabhai2-10/+10
2013-05-08Fix a typo that caused us to not skip removing "."Nalin Dahyabhai1-1/+1
2013-05-08Remove some apparently-accidental debug whitespaceNalin Dahyabhai2-4/+4
2013-04-18Use macro for IANA assigned PA-AS-CHECKSUM numberZhanna Tsitkov2-4/+5
2013-04-12Allow config of dh_min_bits < 2048Tom Yu2-3/+5
2013-04-12Simplify pkinit_check_dh_paramsTom Yu1-67/+47
2013-04-12Ignore missing Q in dh_paramsTom Yu1-4/+4
2013-04-08Avoid passing null pointers to memcpy/memcmpGreg Hudson1-1/+2
2013-03-29Simplify krb5_ldap_readpasswordGreg Hudson1-19/+2
2013-03-28Fix kdb_ldap_create_principal cleanupGreg Hudson1-2/+2
2013-03-28Fix more password_policy cleanup codeGreg Hudson1-11/+6
2013-03-28Get rid of krb5_xfreeGreg Hudson2-23/+23
2013-03-28Fix krb5_ldap_put_password_policy cleanupGreg Hudson1-3/+2
2013-03-28Init output parameter of krb5_decode_princ_entryGreg Hudson1-0/+2
2013-03-24make dependGreg Hudson6-131/+118