repo.or.cz
/
heimdal.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
base: heimbase-svc.h needs to include heimbase.h
2022-01-02
Luke Howard
base: heimbase-svc
.
h ne
e
ds to inclu
d
e he
i
m
b
ase
.
h
commit
|
commitdiff
|
tree
2022-01-02
Luke Howa
r
d
bx509d: don't audi
t
N
U
LL message str
i
n
g
commit
|
commitdiff
|
tree
2021-12-30
Luke Ho
w
ard
kdc: remove
u
nused
v
4 hpro
p
code
commit
|
commitdiff
|
tree
2021-12-30
Nicolas Willi
a
ms
gsskrb5: Use optimistic anon PKI
N
IT arm
o
red FAST
commit
|
commitdiff
|
tree
2021-12-30
Nicolas Williams
ki
n
i
t
: Use optimistic an
o
n PKINIT armored FAST
commit
|
commitdiff
|
tree
2021-12-30
Nicolas Williams
krb5: Add GIC optim
i
stic FAST w/ anon
commit
|
commitdiff
|
tree
2021-12-30
Nic
o
las
W
illiams
asn1: Move decoration to k
r
b5
.
op
t
f
i
l
e
commit
|
commitdiff
|
tree
2021-12-29
Luke Howard
kdc: re
m
ove un
n
ecessa
r
y cast i
n
finalize(
)
(windc
.
c
)
commit
|
commitdiff
|
tree
2021-12-26
Nico
l
as
W
i
lliams
kdc: Add r
e
t to common svc
r
eq
e
lements
commit
|
commitdiff
|
tree
2021-12-26
Nicolas Williams
base: Add ret to common
svc req elements
commit
|
commitdiff
|
tree
2021-12-26
Luke Howard
tests:
use cn
a
me/sn
a
m
e
strin
g
name instead of unparsing
commit
|
commitdiff
|
tree
2021-12-23
Luke
Howard
kdc:
centr
a
lize inc
l
ude P
A
C logic
commit
|
commitdiff
|
tree
2021-12-23
Luk
e
Howard
hd
b
:
add
no
-
au
t
h-data
-
reqd
f
lag t
o
HDB entr
y
commit
|
commitdiff
|
tree
2021-12-23
Luk
e
Howard
kdc: remove
p
ac_
a
ttrib
u
tes_p
r
esent
fi
e
ld
commit
|
commitdiff
|
tree
2021-12-23
Luke
H
oward
kdc: distingu
i
sh long-term
k
ey from
re
p
lacin
g
reply ke
y
commit
|
commitdiff
|
tree
2021-12-23
L
uke H
o
w
a
rd
Revert "kdc
:
disting
u
ish long-term key
f
rom replacing
.
.
.
commit
|
commitdiff
|
tree
2021-12-23
Luke
H
oward
kdc:
d
istin
g
uish long-term key from
r
eplacing r
e
ply key
commit
|
commitdiff
|
tree
2021-12-23
Lu
k
e Howa
r
d
kd
c
: avoid line
a
r search of PA types
commit
|
commitdiff
|
tree
2021-12-22
Luke H
o
wa
r
d
kdc
:
hon
o
r PAC_A
T
TRIBU
T
ES
i
n presented TGT
commit
|
commitdiff
|
tree
2021-12-22
Luke Howard
k
dc:
don't add PA
C
_ATTR
I
B
UTES
P
AC buffer fo
r
s
ervice
.
.
.
commit
|
commitdiff
|
tree
2021-12-22
Luk
e
Ho
w
ard
k
d
c: do
n
't ad
d
REQUES
T
OR_SID
P
AC b
u
ffer for service
.
.
.
commit
|
commitdiff
|
tree
2021-12-22
Luke Howard
krb5: P
A
C_EX
T
RA_LOGON_I
N
F
O
_
F
L
AG
S
_UPN_DEFAULTED fix
commit
|
commitdiff
|
tree
2021-12-22
L
u
ke Howard
krb5: fix
build regression in
r
epo
r
t
_canonical_cli
e
nt_na
m
e
commit
|
commitdiff
|
tree
2021-12-22
Lu
k
e Howard
asn1
:
use " instead of '
when quot
i
ng
o
n
Windows
commit
|
commitdiff
|
tree
2021-12-22
Luke Howard
roken: incl
u
de
MIT lice
n
s
e
text
commit
|
commitdiff
|
tree
2021-12-22
Luke Howar
d
krb5: report_
c
anonical_
c
l
ien
t
_name implies check_p
a
c
commit
|
commitdiff
|
tree
2021-12-22
Luke Howard
roke
n
: don't
cal
l
as
s
ert() befo
r
e v
a
riable decl
commit
|
commitdiff
|
tree
2021-12-21
Luke Howard
kdc: include SID in PAC with GSS authori
z
er
commit
|
commitdiff
|
tree
2021-12-21
Luke Howard
k
dc: add PA PAC fin
a
liz
e
cal
l
back
commit
|
commitdiff
|
tree
2021-12-21
L
uk
e
Howard
kdc: support for
PAC_ATTRIBUTES_I
N
F
O
commit
|
commitdiff
|
tree
2021-12-21
Luke
H
oward
k
d
c: add canonical principa
l
name to authz data
commit
|
commitdiff
|
tree
2021-12-21
L
u
ke Howard
k
rb5
:
support f
o
r
canonical
name in PAC
commit
|
commitdiff
|
tree
2021-12-21
Luke Howard
roken: ad
d
rk_clzll() helper funct
i
on
commit
|
commitdiff
|
tree
2021-12-21
Lu
k
e How
a
r
d
krb5: zero memory in
k
rb5_storage_
e
mem()
commit
|
commitdiff
|
tree
2021-12-20
Luke H
o
ward
roken: unbreak Windo
w
s build
commit
|
commitdiff
|
tree
2021-12-20
Joseph Sutton
kdc:
R
eturn error code f
r
o
m
_
kdc_check_pa
c
() with an
.
.
.
commit
|
commitdiff
|
tree
2021-12-20
Jo
s
eph Sutton
kdc: F
i
x NUL
L
p
ointer dereference on failure to v
e
r
ify
.
.
.
commit
|
commitdiff
|
tree
2021-12-20
Luke Ho
w
a
rd
k
r
b5: fix
a
l
location e
r
ror in krb5_mk_ncre
d
(
)
commit
|
commitdiff
|
tree
2021-12-20
Luke Howar
d
h
d
b: fix allocat
i
on error in
d
e
r
ive_keyset()
commit
|
commitdiff
|
tree
2021-12-19
L
u
k
e Howard
kdc: audi
t
armor c
l
ient pr
i
nci
p
al name
commit
|
commitdiff
|
tree
2021-12-19
Luke Howard
hdb: SQLite HDB
can han
d
le
e
n
t
erprise princi
p
als
commit
|
commitdiff
|
tree
2021-12-18
Luke Howard
tests: che
c
k TGS
with
G
SS
p
re-
a
uthenticat
i
on
commit
|
commitdiff
|
tree
2021-12-18
Luke Howard
kdc: allo
w
cross-
r
ealm F
A
S
T
armor TGT
commit
|
commitdiff
|
tree
2021-12-18
Luke H
o
war
d
kdc:
a
dd auth data type
for synthe
t
ic principals
commit
|
commitdiff
|
tree
2021-12-18
Nicolas Williams
klist
:
Check un
p
arse_
f
l
a
gs() result diffe
r
ently
commit
|
commitdiff
|
tree
2021-12-18
Nicol
a
s
Williams
kd
c
: Check
u
nparse_
f
l
ags()
result dif
f
erently
commit
|
commitdiff
|
tree
2021-12-18
Nic
o
las
Williams
kdc: p
a
rse_bytes() ret
u
rns ssize_t
commit
|
commitdiff
|
tree
2021-12-18
Nicolas
Williams
kcm: parse_
b
yte
s
() returns
ssize_t
commit
|
commitdiff
|
tree
2021-12-18
Nicolas Willia
m
s
hxtool: par
s
e
_
bytes() no
w
return
s
s
s
iz
e
_t
commit
|
commitdiff
|
tree
2021-12-18
Nicolas Will
i
ams
hx509:
F
lags
a
re unsi
g
ned
commit
|
commitdiff
|
tree
2021-12-18
N
i
colas Wi
l
liams
roken: Unpa
r
s
e
wi
d
er in
t
s
commit
|
commitdiff
|
tree
2021-12-18
Luke Howard
Reve
r
t "tgs-rep: always return can
o
nical realm
whe
n
.
.
.
commit
|
commitdiff
|
tree
2021-12-17
Luke Howard
krb5: note
G
SS-API
c
an
b
e used as PA plu
g
i
n inter
f
ace
commit
|
commitdiff
|
tree
2021-12-17
Luk
e
Howa
r
d
krb5:
fix re
g
res
s
ion in te
s
t_cc b
u
i
l
d
commit
|
commitdiff
|
tree
2021-12-17
Lu
k
e
Howar
d
kdc: don't
leak msg in pa_enc
_
chal_valida
t
e()
commit
|
commitdiff
|
tree
2021-12-17
Luke Howard
krb5: i
n
itialize tgs_req buffer in ini
t
_tgs_req()
commit
|
commitdiff
|
tree
2021-12-17
Joseph Sutton
kdc: Check
PAC of
a
rmor ticke
t
s
commit
|
commitdiff
|
tree
2021-12-17
Isaac Boukris
tgs-rep: always return c
a
nonical re
a
lm
w
h
e
n force_can
o
n
i
cali
.
.
.
commit
|
commitdiff
|
tree
2021-12-17
L
u
ke Howard
kdc:
s
et kvno to zero
i
f
r
epl
y
key
replaced
commit
|
commitdiff
|
tree
2021-12-17
Andrew Bartle
t
t
kdc: Use HDB_AUTHSTATUS_INVA
L
I
D
to m
a
rk
t
hat t
h
e statu
s
.
.
.
commit
|
commitdiff
|
tree
2021-12-17
And
r
ew Bar
t
lett
hdb: Improve
n
aming of cons
t
a
n
t
s
f
or hd
b
_a
u
th_status
(
)
commit
|
commitdiff
|
tree
2021-12-17
Andrew Bar
t
let
t
hdb:
A
d
d clear c
o
mments o
n
w
hat th
e
v
a
rious
H
DB_AUTH
.
.
.
commit
|
commitdiff
|
tree
2021-12-17
J
o
seph Sutton
kdc
:
D
on't
return PREAU
T
H
_FAILED if encrypted cha
l
lenge
.
.
.
commit
|
commitdiff
|
tree
2021-12-17
A
nd
r
e
w
Bartlett
kdc: Pass extra inform
a
tion to hdb_auth_status() to
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Joseph
S
utton
kdc: Op
t
iona
l
ly allow missin
g
addi
t
i
onal ticket PAC
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
L
uke H
o
ward
Revert "kdc:
Check PAC of armor ti
c
kets"
commit
|
commitdiff
|
tree
2021-12-16
Luke Howard
Revert "kdc:
f
ix r
e
gression
w
hen
v
alid
a
ting armor client
"
commit
|
commitdiff
|
tree
2021-12-16
Jose
p
h Sutto
n
kdc: Add
krb5_
i
s_enctype_old() to de
t
ermine w
h
ether
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Joseph
S
utton
k
d
c: Ve
r
ify
PAC
i
n TGT provided for user-
t
o
-
user auth
e
ntication
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sutton
kdc:
C
h
eck name in
req
u
e
st against name in use
r
-to
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
J
o
seph Sut
t
on
kd
c
:
Us
e
sname from request rat
h
er than
user-
t
o-user
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Joseph
S
utt
o
n
kdc:
M
o
ve
fetching krbtgt entry to before en
c
type s
e
lection
commit
|
commitdiff
|
tree
2021-12-16
Josep
h
Sutton
kdc: Check re
t
urn c
o
de
commit
|
commitdiff
|
tree
2021-12-16
J
oseph Sut
t
on
kdc: Avoid r
a
ces and
multip
l
e DB loo
k
ups in
s4
u
2self
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Luke Ho
w
ard
kdc: fix
r
egr
e
s
s
ion whe
n
valida
t
i
n
g armo
r
client
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sut
t
o
n
k
d
c: Op
t
ion
a
lly requi
r
e
t
ha
t
P
A
C be be presen
t
commit
|
commitdiff
|
tree
2021-12-16
J
o
seph Sutton
kdc: Check PAC
o
f ar
m
or tickets
commit
|
commitdiff
|
tree
2021-12-16
Josep
h
Sutton
k
d
c
:
Make check_PAC() a
n
d verify
_
f
l
ags() acce
s
sible
.
.
.
commit
|
commitdiff
|
tree
2021-12-15
Joseph S
u
t
t
on
k
d
c
: Don't advertise
padata ty
p
es that will not be
.
.
.
commit
|
commitdiff
|
tree
2021-12-15
Nicolas W
i
lliams
kadm5: Use
K
ADM5_PAS
S
_Q_GENERIC
commit
|
commitdiff
|
tree
2021-12-15
Nicolas Wi
l
liams
k
adm5: Add KADM5_PA
S
S_Q_GENERIC, no
t
e MIT
d
if
f
s
commit
|
commitdiff
|
tree
2021-12-15
Nicolas Williams
k
r
b5: Fix incorr
e
ct use of KRB5_ERR_
N
O_
S
ERVICE
commit
|
commitdiff
|
tree
2021-12-15
N
i
c
ola
s
Williams
krb5: Ad
d
missing errors from MI
T
krb5
commit
|
commitdiff
|
tree
2021-12-14
Luk
e
How
a
r
d
hdb: do not
r
e
t
urn HDB_ERR_WRO
N
G_REA
L
M
if force_canon
s
et
commit
|
commitdiff
|
tree
2021-12-14
Jos
e
ph S
u
tton
k
d
c
:
Don'
t
ke
e
p trying keys for encrypted-challenge
.
.
.
commit
|
commitdiff
|
tree
2021-12-14
Joseph Sutt
o
n
kdc: Check
authda
t
a
in tick
e
t rat
h
er than in request
.
.
.
commit
|
commitdiff
|
tree
2021-12-14
N
i
colas Williams
kinit: Tr
y
anon PKINIT armored FA
S
T w
h
en possib
l
e
commit
|
commitdiff
|
tree
2021-12-14
Nicolas Willia
m
s
kdc: Document enable-pkin
i
t param
commit
|
commitdiff
|
tree
2021-12-14
N
i
colas W
i
lliams
kdc: Add [kd
c
]
p
arams t
o
co
n
t
r
ol PA-EN
C
-TIME
S
TA
M
P
commit
|
commitdiff
|
tree
2021-12-14
Josep
h
Sutton
kdc: Add support fo
r
explicit armoring from M
S
-
KI
L
E
commit
|
commitdiff
|
tree
2021-12-14
Joseph S
u
tton
kdc: A
l
low
R
ODC-issue
d
armor tickets
commit
|
commitdiff
|
tree
2021-12-14
L
uke
H
oward
kdc:
u
p
da
t
e
PAC hooks for Sam
b
a
commit
|
commitdiff
|
tree
2021-12-14
Luke Howard
tests
:
use KRB
5
_CAL
L
CONV for windc test plu
g
in
commit
|
commitdiff
|
tree
2021-12-14
J
oseph Sutto
n
he
i
mda
l
: Make _
k
rb5_pac_get_kdc_checksum_info() into
.
.
.
commit
|
commitdiff
|
tree
2021-12-14
Jos
e
p
h
Sutton
kdc: Fix leak
commit
|
commitdiff
|
tree
2021-12-14
Luke Howard
kdc: don't leak a
r
mor crypto in TGS path
commit
|
commitdiff
|
tree
2021-12-13
Luke Howard
krb5:
r
equire s
t
rengthen_key when FAST + G
S
S
PA
commit
|
commitdiff
|
tree
2021-12-13
Luke Howard
kdc: remo
v
e tem
p
orary krb5_con
t
ext vari
a
ble
commit
|
commitdiff
|
tree
2021-12-13
Luke Howa
r
d
kinit: add --
k
d
c-host
n
a
me option
commit
|
commitdiff
|
tree
2021-12-13
L
u
ke
H
oward
kdc: sa
l
t FAST
cookie key w
i
t
h c
l
ient name
commit
|
commitdiff
|
tree
next