aboutsummaryrefslogtreecommitdiff
path: root/src/tests
AgeCommit message (Expand)AuthorFilesLines
2020-10-08Fix Python deprecation warningsGreg Hudson5-11/+11
2020-09-22Allow aliases when matching U2U second ticketIsaac Boukris1-0/+25
2020-09-07Use the term "primary KDC" in source and docsGreg Hudson5-24/+25
2020-08-07Cache S4U2Proxy requests by second ticketIsaac Boukris1-0/+3
2020-08-07Expand dns_canonicalize_host=fallback supportGreg Hudson2-25/+69
2020-08-04Don't create hostbased principals in new KDBsGreg Hudson3-3/+6
2020-08-04Try kadmin/admin first in libkadm5clntGreg Hudson1-0/+14
2020-07-07Avoid backward seeks when reading keytab filesJoshua Neuheisel1-1/+8
2020-07-01Add GSS_KRB5_NT_X509_CERT name typeIsaac Boukris3-1/+15
2020-06-15Prevent deletion of K/MGreg Hudson1-0/+6
2020-06-08Set pw_expiration during LDAP loadGreg Hudson1-1/+7
2020-06-02Fix typo in t_renew.pyRobbie Harwood1-1/+2
2020-05-29Remove resolver test utilityGreg Hudson6-468/+2
2020-05-29Default dns_canonicalize_hostname to "fallback"Greg Hudson2-5/+5
2020-05-29Return GSS_S_NO_CRED from krb5 gss_acquire_credGreg Hudson1-1/+1
2020-05-20Add channel bindings testsIsaac Boukris7-29/+219
2020-04-08Fix typos in commentsGreg Hudson15-17/+17
2020-03-31Correctly import "service@" GSS host-based nameGreg Hudson1-0/+3
2020-03-26Eliminate redundant PKINIT responder invocationGreg Hudson1-4/+7
2020-03-26make regenGreg Hudson2-0/+23
2020-03-09Change KDC constrained-delegation precedence orderIsaac Boukris2-10/+24
2020-03-05Use two queues for concurrent t_otp.py daemonsGreg Hudson1-3/+4
2020-03-02Refresh manually acquired creds from client keytabRobbie Harwood1-0/+18
2020-02-27Allow deletion of require_auth with LDAP KDBGreg Hudson1-1/+25
2020-02-27Allow certauth modules to set hw-authent flagGreg Hudson1-0/+13
2020-02-21Fix AS-REQ checking of KDB-modified indicatorsGreg Hudson1-0/+11
2020-02-05Test that PAC is the first authdata elementIsaac Boukris1-7/+47
2020-01-29Remove private mutators for context enctypesRobbie Harwood2-13/+9
2020-01-28Zero length fields when freeing object contentsIsaac Boukris1-0/+2
2020-01-24Honor transited-policy-checked flag in serversGreg Hudson2-8/+45
2020-01-23Apply permitted_enctypes to KDC request enctypesRobbie Harwood3-21/+9
2020-01-22Add tests for cross-realm RBCD request authdataIsaac Boukris1-3/+28
2020-01-22Allow cross-realm RBCD with PAC and other authdataIsaac Boukris1-3/+0
2020-01-17Fix KDC crash in handle_signticketIsaac Boukris1-0/+39
2020-01-16Add tests for S4U request-authdata handlingIsaac Boukris5-8/+194
2020-01-13Restrict test KDB to local principalsIsaac Boukris1-1/+3
2020-01-07Fix LDAP policy enforcement of pw_expirationRobbie Harwood1-0/+17
2020-01-07Work around macOS SIP in the test suiteGreg Hudson5-26/+23
2019-12-28Remove KRB5_KDB_FLAG_ALIAS_OKIsaac Boukris1-2/+3
2019-12-28Do not always canonicalize enterprise principalsIsaac Boukris1-0/+12
2019-12-06Add NegoEx testsGreg Hudson4-21/+232
2019-12-06Qualify short hostnames when not using DNSGreg Hudson2-6/+11
2019-11-13Update test suite cert message digest to sha256Robbie Harwood7-271/+271
2019-11-13Fix minor errors in softpkcs11Robbie Harwood1-3/+4
2019-11-03Allow client canonicalization in non-krbtgt AS-REPIsaac Boukris1-0/+3
2019-10-21Fix t_otp.py for pyrad 2.2Greg Hudson1-0/+1
2019-09-19Add environment variable for GSS mech configGreg Hudson2-1/+16
2019-09-09Add tests for local and cross-realm RBCD requestsIsaac Boukris1-0/+99
2019-09-09S4U2Proxy evidence tickets needn't be forwardableIsaac Boukris1-14/+11
2019-08-26Allow the KDB to see and modify auth indicatorsGreg Hudson1-0/+5