repo.or.cz
/
heimdal.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
gss: don't explicitly reorder krb5 to front of spnego
2020-02-04
L
u
ke
H
owar
d
gss: don't
explicitly
r
eorder
k
rb5 t
o
front of spnego
commit
|
commitdiff
|
tree
2020-02-04
Luke Howard
gss:
h
armonize
n
e
g
St
a
te with
R
FC 41
7
8
commit
|
commitdiff
|
tree
2020-02-04
Luk
e
Ho
w
ard
gss:
harm
o
n
i
ze SPNEGO with [MS-
S
PNG]
commit
|
commitdiff
|
tree
2020-02-04
Luke Howa
r
d
g
ss:
don't gen
e
rat
e
mechListMIC
i
n SPNEGO if it is
.
.
.
commit
|
commitdiff
|
tree
2020-02-04
Lu
k
e Howard
gss: port Ne
g
oEx imp
l
ement
a
t
i
on from MIT
commit
|
commitdiff
|
tree
2020-02-04
Luke H
o
ward
g
ss: remove SPNEG
O
name wrappers
commit
|
commitdiff
|
tree
2020-02-04
Luke Howa
r
d
gs
s
: ad
d
s
ome missing
G
M
_
U
S
E_MG_C
R
ED
c
h
e
cks
commit
|
commitdiff
|
tree
2020-02-04
Lu
k
e H
o
w
a
rd
gss: mak
e
k
rb5 default
G
SS mech ear
l
ier in path
commit
|
commitdiff
|
tree
2020-02-04
Luke Howar
d
gss: expose
g
ss_destroy
_
cred()
commit
|
commitdiff
|
tree
2020-02-04
Luke H
o
ward
gss: mer
g
e Apple name helper AP
I
s
commit
|
commitdiff
|
tree
2020-02-04
Luke Howard
gss: merge enhanc
e
d
A
p
p
le mechglue logg
i
ng
commit
|
commitdiff
|
tree
2020-02-04
Luke Howard
gss: use tail qu
e
ue instead of
s
ingly linked list in
.
.
.
commit
|
commitdiff
|
tree
2020-02-04
Luke H
o
ward
base: m
a
ke
he
i
mque
u
e
.
h
a
shar
e
d hea
d
e
r
commit
|
commitdiff
|
tree
2020-02-04
Luke
H
o
w
ard
gs
s
: m
e
chanism opt
i
onal interfaces
commit
|
commitdiff
|
tree
2020-02-04
Luke Howard
g
s
s:
u
se _
g
ss_ntlm_set_keys() in gss_ini
t
_
sec_co
n
text()
commit
|
commitdiff
|
tree
2020-02-04
Luke
Howard
gss: don't provi
d
e
d
omain to nsi_pro
b
e() in
N
TLM
commit
|
commitdiff
|
tree
2020-02-04
Luke Howard
gss: NTLM nsi
_
p
r
o
be retur
n
s a krb5, not
g
s
s
error
commit
|
commitdiff
|
tree
2020-02-04
Luk
e
Howar
d
gss: regist
e
r
GSS_
K
RB5
_
S err
o
r table
commit
|
commitdiff
|
tree
2020-01-01
L
u
ke Howard
kdc: l
i
nk test_to
k
en_va
l
idator against libgssapi
commit
|
commitdiff
|
tree
2019-12-06
Luke Howard
hcrypto: support BCRYPT_HASH_
R
EUSABLE_
F
LAG
commit
|
commitdiff
|
tree
2019-12-06
L
u
ke
H
oward
ro
k
en: Wi
n
do
w
s version support helpers
commit
|
commitdiff
|
tree
2019-06-03
L
u
ke Ho
w
ard
kdc: d
o
n't miside
n
tify
constrained
d
eleg
a
ti
o
n requ
e
s
t
s
.
.
.
commit
|
commitdiff
|
tree
2019-06-03
L
u
ke Howard
kdc
:
refact
o
r anonymous checks
i
n K
D
C
commit
|
commitdiff
|
tree
2019-06-03
Luke Ho
w
a
r
d
kdc: check for cname-in-addl-tkt flag in constrained
.
.
.
commit
|
commitdiff
|
tree
2019-06-02
Luke Howard
krb5
:
rename
cons
t
rained-dele
g
a
t
i
o
m
to
cname-
i
n
-
a
d
d
l-tk
t
commit
|
commitdiff
|
tree
2019-05-22
Luke
H
oward
kuser:
use an
o
n_pkinit_
r
e
alm instead o
f
anon-pkinit
.
.
.
commit
|
commitdiff
|
tree
2019-05-22
Luk
e
H
o
ward
kuse
r
:
pl
u
g leak in kin
i
t anonymous PKINIT renew
commit
|
commitdiff
|
tree
2019-05-21
Luke Howard
kus
e
r: allow kin
i
t to renew anonymous PKINIT tick
e
ts
commit
|
commitdiff
|
tree
2019-05-19
Luke Howard
klist: di
s
p
lay all kno
w
n fl
a
gs when
l
i
s
ting ticket
s
commit
|
commitdiff
|
tree
2019-05-19
Luke H
o
ward
krb5: set PKINIT_BTMM flag
p
e
r Apple implementati
o
n
commit
|
commitdiff
|
tree
2019-05-19
L
uke
H
o
wa
r
d
krb5: don't require krbtgt otherName m
a
tc
h
for Win2K
commit
|
commitdiff
|
tree
2019-05-19
Luk
e
Howard
k
d
c
:
use act
u
al client princ for KR
B
5SignedPat
h
commit
|
commitdiff
|
tree
2019-05-19
Luke Howard
k
rb
5
: check KD
C
supports anonymous if req
u
ested
commit
|
commitdiff
|
tree
2019-05-18
Luke Howard
hcr
y
pto-p
k
cs11: check m
e
c
h
a
n
i
sm flags
commit
|
commitdiff
|
tree
2019-05-18
Luke Howard
krb5: remove duplicate KRB5_ANON_MA
T
CH
_
xxx
d
efines
commit
|
commitdiff
|
tree
2019-05-14
L
u
k
e How
a
rd
k
r
b5: a
l
w
a
y
s
confirm PA-PKI
N
IT-
K
X for
a
non PKINIT
commit
|
commitdiff
|
tree
2019-05-14
Luk
e
Howard
krb5: krb5_g
e
t_init_creds
_
opt_s
e
t_pkini
t
flag names
commit
|
commitdiff
|
tree
2019-05-14
Luke How
a
rd
krb5:
_
krb5_p
r
incipal_is_anonymo
u
s()
helpe
r
API
commit
|
commitdiff
|
tree
2019-05-14
Luke Howard
k
u
ser: kg
e
tcred supp
o
rt f
o
r anonymous service
t
icket
s
commit
|
commitdiff
|
tree
2019-05-14
Luke
H
oward
krb5: su
p
port
f
or anon
y
mous T
G
S re
q
ue
s
t
s
commit
|
commitdiff
|
tree
2019-05-14
Luke Howard
kdc:
s
uppo
r
t for anonymous TGS-REQs
commit
|
commitdiff
|
tree
2019-05-14
Luke Howard
kuser: support aut
h
enticated anon
y
mous AS-REQs in kinit
commit
|
commitdiff
|
tree
2019-05-14
Luke How
a
r
d
kdc: allow a
n
onymous AS request
s
with
l
o
ng-term keys
commit
|
commitdiff
|
tree
2019-05-14
Luke Howard
k
d
c
: conform _kdc_m
a
ke_anonymous_principalname() to
.
.
.
commit
|
commitdiff
|
tree
2019-05-14
Luke How
a
rd
kdc: do no
t
include PAC for an
o
nymous AS requ
e
sts
commit
|
commitdiff
|
tree
2019-05-14
Luke Howard
k
d
c
: fix comp
l
i
a
n
ce
w
ith
RFC 8062 Sectio
n
4
.
1
commit
|
commitdiff
|
tree
2019-05-14
Luke
Howa
r
d
krb5: f
i
x spelling error in debug log
commit
|
commitdiff
|
tree
2019-01-10
Luke
Howard
kadm5:
a
dd chpass_with_key
hoo
k
(#397)
commit
|
commitdiff
|
tree
2019-01-10
Luke Howard
kadm5:
r
emove unused va
r
i
able from
sample_hoo
k
commit
|
commitdiff
|
tree
2019-01-07
Luke Howard
hdb
:
ensure
Salt is zero
'
d in add_d
e
fault
_
salts()
commit
|
commitdiff
|
tree
2019-01-07
Lu
k
e Ho
w
ar
d
kr
b
5: cha
n
ge "version" to "i
n
stance"
in
p
lugin e
r
ro
r
.
.
.
commit
|
commitdiff
|
tree
2019-01-07
L
uke Howard
kdc: omit default salt fro
m
PA
-
ETYPE-INFO[2]
commit
|
commitdiff
|
tree
2019-01-07
Luke Howard
hdb:
g
enerate
d
e
faul
t
salts for ent
r
ies missing them
commit
|
commitdiff
|
tree
2019-01-07
Luke
Howar
d
gssa
p
i: SPNEGO does not reset NTLM
RC4 state (#509)
commit
|
commitdiff
|
tree
2019-01-06
Luk
e
H
oward
hdb: force canonicalizat
i
o
n
of e
n
terprise principal
.
.
.
commit
|
commitdiff
|
tree
2019-01-06
Luke Ho
w
a
r
d
k
d
c: only set H
D
B_F_GET
_
KRBTGT wh
e
n re
q
uesting
T
GS
.
.
.
commit
|
commitdiff
|
tree
2019-01-06
Luke
H
oward
Revert "kdc: move more
name c
a
non
i
caliza
t
ion
l
ogic
.
.
.
commit
|
commitdiff
|
tree
2019-01-05
Luke Howar
d
hdb:
k
rb5_locl
.
h
o
bviates need for forward d
e
c
larations
commit
|
commitdiff
|
tree
2019-01-05
Luke Howa
r
d
k
d
c
:
move more name canonicalization
logic t
o
KDC
commit
|
commitdiff
|
tree
2019-01-05
Luke Howa
r
d
kdc
:
p
e
r
fo
r
m AS-REQ canonicalization i
n
kdc
commit
|
commitdiff
|
tree
2019-01-05
Luke Howar
d
hdb: dereference p
r
inci
p
al ali
a
ses
in all KDC
look
u
p
s
.
.
.
commit
|
commitdiff
|
tree
2019-01-05
Luke Howard
Rever
t
"K
D
C: Allow hdb to set the issued
t
icket's realm"
commit
|
commitdiff
|
tree
2019-01-04
Luke Howard
Reve
r
t "Revert "Fix tests/plugin/windc
.
c""
commit
|
commitdiff
|
tree
2019-01-04
Luke How
a
r
d
kdc: ex
p
o
r
t kdc_ge
t
_instan
c
e() fo
r
wi
n
dc plu
g
ins
commit
|
commitdiff
|
tree
2019-01-04
Luke Howa
r
d
Re
v
ert "Fix tests/plugin/windc
.
c"
commit
|
commitdiff
|
tree
2019-01-04
Luke Howard
gssapi: add so
m
e Apple (c) n
o
tic
e
s for m
e
chglue bugfix
.
.
.
commit
|
commitdiff
|
tree
2019-01-04
Luke
H
oward
gssapi: defensive
l
y
ini
t
ialize *out in gss
_
dupli
c
ate
_
cred()
commit
|
commitdiff
|
tree
2019-01-04
Luke Howard
g
s
sapi: refactor gss_duplicate_cred()
commit
|
commitdiff
|
tree
2019-01-04
Luke Howa
r
d
g
s
sapi: arg
u
m
e
nt validation f
i
xe
s
gss_store_cr
e
d_into
(
)
commit
|
commitdiff
|
tree
2019-01-04
Luke Howa
r
d
g
s
sapi: im
p
lement gss_
s
et_neg_mechs
(
) (#495)
commit
|
commitdiff
|
tree
2019-01-04
Luke Howard
g
ssapi:
h
o
n
o
r
a
ccepto
r
c
r
edential in SPNEGO (#506)
commit
|
commitdiff
|
tree
2019-01-04
Luke Howar
d
windc: updat
e
test windc plugin to use
new load
SPI
commit
|
commitdiff
|
tree
2019-01-04
L
u
ke Howard
always lo
a
d plu
g
ins with RTLD_LOCAL/
R
TLD_GROUP if
a
vailabl
e
commit
|
commitdiff
|
tree
2019-01-04
Luke H
o
w
ar
d
krb5, kad
m
5: refac
t
or plugin AP
I
commit
|
commitdiff
|
tree
2019-01-03
L
uke Howard
gssa
p
i: remo
v
e
n
o
n-
m
ech sta
t
us from _gss_
m
g_error
(
.
.
.
commit
|
commitdiff
|
tree
2019-01-03
L
u
ke Howard
gssapi: import mechglue a
l
l
o
cation utility functions
.
.
.
commit
|
commitdiff
|
tree
2019-01-03
Luke Howard
gssapi: credential store extensions (#
4
5
1
)
commit
|
commitdiff
|
tree
2019-01-03
Luke Howard
g
s
sapi:
honor initiator
c
redential in SPNEGO (#5
0
6)
commit
|
commitdiff
|
tree
2019-01-03
Luke H
o
ward
g
s
sap
i
:
gss_k
r
b5_
s
et_a
l
low
a
ble_enctypes proto
t
ype mi
s
match
commit
|
commitdiff
|
tree
2019-01-03
Lu
k
e Ho
w
a
rd
gssapi: canonicalize me
c
h OID
in gss_a
c
cept_sec_contex
t
()
commit
|
commitdiff
|
tree
2019-01-03
Luke
H
o
ward
g
ss
a
pi:
import bug
f
i
x
es from Apple Hei
m
d
al-52
0
commit
|
commitdiff
|
tree
2019-01-03
Luke Howard
gssa
p
i: fix dls
y
m() return valu
e
casti
n
g
commit
|
commitdiff
|
tree
2019-01-03
Luke
Howard
g
s
sapi: gss_comp
a
re_name()
both ways
(
#503)
commit
|
commitdiff
|
tree
2019-01-03
Luke How
a
r
d
gssapi: ntlm mech
s
hould use _gss_ntlm_copy_cred()
.
.
.
commit
|
commitdiff
|
tree
2019-01-01
Luke Howard
Windows:
remove r
e
ference
t
o NetInfo
commit
|
commitdiff
|
tree
2019-01-01
Luke Howar
d
Wind
o
w
s
:
defa
u
lt
c
lient ke
y
tab to %{LOCAL_AP
P
DATA
}
.
.
.
commit
|
commitdiff
|
tree
2018-12-31
Luke
H
ow
a
rd
gssapi:
support for client keytab in gss_acq
u
ire_cred
.
.
.
commit
|
commitdiff
|
tree
2018-12-31
Luke Howard
krb
5
: fix
a couple
of missing options in v
e
rify_krb5_conf
commit
|
commitdiff
|
tree
2018-12-30
Luke Howard
libhcrypto: UI_UTIL_F
L
AG
_
VE
R
IFY_S
I
LENT
commit
|
commitdiff
|
tree
2018-12-29
Lu
k
e Howa
r
d
gssapi: a
d
d OPTSYM
for gss_dupli
c
a
t
e_cred() (#487)
commit
|
commitdiff
|
tree
2018-12-29
Luke Howar
d
kdc
:
lo
g
pr
i
ncipa
l
n
ame in
TGT no
t
fo
u
nd error
commit
|
commitdiff
|
tree
2018-12-28
Luke How
a
r
d
krb5: fix p
o
inter in
d
ir
e
ction error
i
n keyring c
a
che
.
.
.
commit
|
commitdiff
|
tree
2018-12-27
Luke Howard
hcrypt
o
:
print failure on pas
s
word
m
i
smatch (#469)
commit
|
commitdiff
|
tree
2018-12-27
L
u
ke
H
oward
kadmin: do
n
ot assign passwords
at realm init
i
a
l
ization
commit
|
commitdiff
|
tree
2018-12-27
Luke Howard
Rev
e
rt "kadmin: do not assign password
s
at
r
e
a
lm initi
a
li
z
ati
o
n"
commit
|
commitdiff
|
tree
2018-12-27
L
u
ke Howard
kadm
i
n:
do not assign passwords at
r
e
a
lm i
n
itializati
o
n
commit
|
commitdiff
|
tree
2018-12-27
Luke Howa
r
d
kadm
5
: i
m
prove kadm
5
hook logging (
#
397)
commit
|
commitdiff
|
tree
2018-12-26
Luke Howard
kadm5:
m
ove passw
o
rd q
u
ality checks out of
da
e
mo
n
s
.
.
.
commit
|
commitdiff
|
tree
2018-12-26
Lu
k
e Howard
kad
m
5:
p
r
e/po
s
t-c
o
mmit pl
u
gin hoo
k
for
ka
d
m5 update
.
.
.
commit
|
commitdiff
|
tree
2018-12-26
Lu
k
e Howa
r
d
k
passw
d
: don
'
t log "Changing pas
s
word for %s
"
when
.
.
.
commit
|
commitdiff
|
tree
next