aboutsummaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Expand)AuthorFilesLines
2020-11-03Add recursion limit for ASN.1 indefinite lengthsGreg Hudson1-7/+9
2020-11-03Suppress Leash error popup on MSLSA renew failureGreg Hudson1-2/+2
2020-11-03Fix Leash crash when ticket autorenewal failsGreg Hudson1-27/+0
2020-11-03Set lockdown attribute when creating LDAP KDBGreg Hudson1-1/+1
2020-11-03Fix input length checking in SPNEGO DER decodingGreg Hudson1-5/+5
2020-11-03Allow gss_unwrap_iov() of unpadded RC4 tokensGreg Hudson1-6/+3
2020-11-03Avoid using LMDB environments across forksGreg Hudson5-10/+26
2020-11-03Set pw_expiration during LDAP loadGreg Hudson2-2/+8
2020-11-03Unregister thread key in SPNEGO finalizationGreg Hudson4-4/+93
2020-11-03Unify kvno option documentationRobbie Harwood2-12/+17
2020-11-03Update for krb5-1.18.2-postreleaseGreg Hudson1-2/+2
2020-05-21Update for krb5-1.18.2krb5-1.18.2-finalGreg Hudson28-31/+31
2020-05-21Fix SPNEGO acceptor mech filteringGreg Hudson1-1/+1
2020-05-21Prevent use of invalid local TGT keyGreg Hudson1-5/+5
2020-05-21Add stubs for some removed replay cache functionsGreg Hudson2-0/+40
2020-05-21Fix overzealous SPNEGO src_name/deleg_cred releaseGreg Hudson1-2/+2
2020-04-13Update for krb5-1.18.1-postreleaseGreg Hudson1-2/+2
2020-04-13Update for krb5-1.18.1krb5-1.18.1-finalGreg Hudson28-31/+31
2020-04-11make update-poGreg Hudson1-89/+89
2020-04-11Update man pagesGreg Hudson26-27/+27
2020-04-10Make ksu honor KRB5CCNAME againGreg Hudson1-1/+30
2020-04-10Correct formatting of trace log microsecondsGreg Hudson1-2/+2
2020-04-10Fix typos in documentationGreg Hudson1-4/+4
2020-04-10Make fiat 128-bit typedefs work with older gccGreg Hudson2-3/+5
2020-03-18Change KDC constrained-delegation precedence orderIsaac Boukris4-103/+107
2020-03-18Fix null dereference qualifying short hostnamesGreg Hudson1-2/+3
2020-03-18Fix typo in musl build fixGreg Hudson1-1/+1
2020-03-18Fix Linux build error with musl libcTBK1-2/+1
2020-03-18Allow deletion of require_auth with LDAP KDBGreg Hudson3-12/+47
2020-03-18Fix AS-REQ checking of KDB-modified indicatorsGreg Hudson3-9/+58
2020-03-17Update copyright years to 2020Greg Hudson3-3/+3
2020-02-12Update for krb5-1.18-postreleaseGreg Hudson1-2/+2
2020-02-12Update for krb5-1.18krb5-1.18-finalGreg Hudson2-4/+4
2020-02-12make update-poGreg Hudson1-4/+4
2020-02-11Always use S4U2Proxy second ticket parsed authdataIsaac Boukris1-3/+9
2020-02-10Don't assume OpenSSL failures are memory errorsRobbie Harwood2-2/+2
2020-02-10Test that PAC is the first authdata elementIsaac Boukris2-10/+51
2020-02-10Put KDB authdata firstIsaac Boukris1-3/+6
2020-01-27Update for krb5-1.18-beta2-postreleaseGreg Hudson1-2/+2
2020-01-27Update for krb5-1.18-beta2krb5-1.18-beta2Greg Hudson2-4/+4
2020-01-27make update-poGreg Hudson1-4/+4
2020-01-27Update man pagesGreg Hudson1-1/+1
2020-01-27make dependGreg Hudson1-0/+10
2020-01-24Honor transited-policy-checked flag in serversGreg Hudson4-14/+56
2020-01-24Apply permitted_enctypes to KDC request enctypesRobbie Harwood6-118/+108
2020-01-24Further simplify test KDB module authdata codeGreg Hudson1-3/+5
2020-01-24Allow cross-realm RBCD with PAC and other authdataIsaac Boukris4-36/+17
2020-01-24Fix KDC crash in handle_signticketIsaac Boukris3-15/+55
2020-01-24Add tests for S4U request-authdata handlingIsaac Boukris5-8/+194
2020-01-24Fix S4U client authdata handlingIsaac Boukris1-0/+19