repo.or.cz
/
heimdal.git
/
search
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
log
|
graphiclog1
|
graphiclog2
|
commit
|
commitdiff
|
tree
|
refs
|
edit
|
fork
first
·
prev
·
next
tgs-rep: always return canonical realm when force_canonicalize set
2021-12-17
Is
a
ac Bouk
r
is
tgs-rep:
always
r
eturn canonical realm when forc
e
_canonicali
.
.
.
commit
|
commitdiff
|
tree
2021-12-17
Luke
H
oward
k
d
c: set kvn
o
to
z
ero if reply key replaced
commit
|
commitdiff
|
tree
2021-12-17
A
n
drew Bar
t
lett
kdc: Use
HDB_AUTHSTATU
S
_INVAL
I
D
t
o
ma
r
k that
the status
.
.
.
commit
|
commitdiff
|
tree
2021-12-17
And
r
ew
B
artlett
hdb:
Improve naming
o
f constants for
h
db_auth_s
t
atus()
commit
|
commitdiff
|
tree
2021-12-17
Andrew Ba
r
t
lett
hdb: Add clear
c
omments on what th
e
various HDB_A
U
TH
.
.
.
commit
|
commitdiff
|
tree
2021-12-17
J
oseph S
u
t
ton
kdc: Don'
t
return PRE
A
UTH_FAILED if
e
ncrypte
d
challe
n
ge
.
.
.
commit
|
commitdiff
|
tree
2021-12-17
An
d
rew Ba
r
tle
t
t
kdc: Pass extra information to hdb_auth
_
st
a
tus() t
o
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
J
o
seph
S
utton
kdc: Optionally allow mi
s
sing additional ti
c
k
e
t PAC
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Luke H
o
ward
Rev
e
rt "kd
c
:
C
h
e
c
k
PAC
of
armo
r
tickets"
commit
|
commitdiff
|
tree
2021-12-16
Luke Howard
Revert
"
kdc: f
i
x regre
s
sion whe
n
validating armo
r
c
l
ient"
commit
|
commitdiff
|
tree
2021-12-16
J
o
seph
S
u
t
ton
k
dc: Add krb5_
i
s_enct
y
pe_old()
t
o de
t
e
r
mine whether
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Joseph Su
t
ton
kdc: Verify PAC in TG
T
p
r
ovide
d
f
o
r
user-to-user authentication
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sutton
kdc: Check
na
m
e in request aga
i
n
st name in user-t
o
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sutto
n
kdc:
U
se s
n
a
m
e from
r
eque
s
t
rather than user-to-
u
se
r
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
J
o
s
eph Sutton
kd
c
:
Move fetc
h
i
n
g krbtgt entry to befo
r
e
enc
t
ype s
e
lection
commit
|
commitdiff
|
tree
2021-12-16
Joseph Sut
t
on
k
d
c: Check return
c
ode
commit
|
commitdiff
|
tree
2021-12-16
Joseph
Sutto
n
kd
c
: Avoid races and multiple DB look
u
ps in s4
u
2se
l
f
.
.
.
commit
|
commitdiff
|
tree
2021-12-16
Luk
e
Howard
kdc: fix r
e
gr
e
ssion when v
a
l
idating armor client
commit
|
commitdiff
|
tree
2021-12-16
Joseph
S
utton
kdc: O
p
tionally requi
r
e that PAC be
b
e pre
s
ent
commit
|
commitdiff
|
tree
2021-12-16
Jo
s
eph Sutton
kdc: C
h
e
ck
PAC of
a
rm
o
r tick
e
ts
commit
|
commitdiff
|
tree
2021-12-16
Jos
e
ph Sutt
o
n
kdc:
M
ake ch
e
ck_P
A
C() and verify_fla
g
s
(
) accessible
.
.
.
commit
|
commitdiff
|
tree
2021-12-15
Joseph Sutton
k
dc: Don't adver
t
i
se padata types that will not
b
e
.
.
.
commit
|
commitdiff
|
tree
2021-12-15
N
ico
l
as
W
illiam
s
kadm5: U
s
e KADM5_PASS_Q_GENER
I
C
commit
|
commitdiff
|
tree
2021-12-15
Nicola
s
Willia
m
s
kadm5: Add
KA
D
M5_PASS_Q_GENERIC, note
M
I
T
dif
f
s
commit
|
commitdiff
|
tree
2021-12-15
Nicolas Willia
m
s
krb5: Fix i
n
c
orrect
us
e
of KRB5_ERR_N
O
_SER
V
I
CE
commit
|
commitdiff
|
tree
2021-12-15
Nicol
a
s
Williams
krb
5
: A
d
d miss
i
ng errors from MIT krb5
commit
|
commitdiff
|
tree
2021-12-14
Luke Howa
r
d
hdb: do
not r
e
turn HDB
_
ER
R
_WRONG_
R
E
ALM if f
o
rce_c
a
non set
commit
|
commitdiff
|
tree
2021-12-14
Josep
h
S
u
t
ton
kdc: Don't kee
p
t
rying
keys for
e
n
c
r
y
pted
-
challe
n
ge
.
.
.
commit
|
commitdiff
|
tree
2021-12-14
Jos
e
ph Sutton
kdc: Che
c
k
authdata
in ticket rather
than in request
.
.
.
commit
|
commitdiff
|
tree
2021-12-14
Nicolas Williams
k
i
nit: Try anon PKINIT armored
FAST when poss
i
ble
commit
|
commitdiff
|
tree
2021-12-14
Nicolas William
s
kdc
:
D
ocument
e
nable
-
pk
i
nit param
commit
|
commitdiff
|
tree
2021-12-14
Nicolas William
s
kd
c
: Add [kdc] params to control PA-ENC
-
TIMESTAMP
commit
|
commitdiff
|
tree
2021-12-14
Joseph Su
t
ton
k
dc: Add su
p
po
r
t for explicit armoring
from MS-KI
L
E
commit
|
commitdiff
|
tree
2021-12-14
Jose
p
h Sutton
kdc:
Allow RODC-issued ar
m
or tickets
commit
|
commitdiff
|
tree
2021-12-14
Luke Howar
d
kdc: update PAC
h
ooks for S
a
mba
commit
|
commitdiff
|
tree
2021-12-14
Luk
e
Howard
tests: use
KRB5_CALLCONV for windc test plugin
commit
|
commitdiff
|
tree
2021-12-14
Josep
h
Sutton
hei
m
d
a
l
: Make _krb5_pac_get
_
kd
c
_check
s
u
m
_info() into
.
.
.
commit
|
commitdiff
|
tree
2021-12-14
Jos
e
ph Sutton
kdc: Fix
le
a
k
commit
|
commitdiff
|
tree
2021-12-14
Luke Howar
d
kdc
:
do
n
't leak
armor crypt
o
in TGS pat
h
commit
|
commitdiff
|
tree
2021-12-13
Lu
k
e Howard
krb5: req
u
i
r
e strengthen_key when FAS
T
+ GSS P
A
commit
|
commitdiff
|
tree
2021-12-13
Lu
k
e Howard
kdc: remov
e
temporary
kr
b
5_context variab
l
e
commit
|
commitdiff
|
tree
2021-12-13
Luke
H
oward
kinit:
a
d
d --kdc-hos
t
name op
t
ion
commit
|
commitdiff
|
tree
2021-12-13
Luk
e
Howar
d
kdc: salt FAST coo
k
i
e
key with client name
commit
|
commitdiff
|
tree
2021-12-13
Luke Howard
kdc:
s
y
nc KDC FAST wit
h
Heimdal-597
.
121
.
1
commit
|
commitdiff
|
tree
2021-12-13
Luke
Howard
krb5: import
H
eimdal-597
.
121
.
1 AS/TGS client
commit
|
commitdiff
|
tree
2021-12-10
Lu
k
e
Howard
k
rb5: do not
pack
ccapi on
Apple Silicon
commit
|
commitdiff
|
tree
2021-12-10
Luke Howard
Revert "s4/heimdal/lib/
k
rb5/pac
.
c
:
A
l
ign PAC buffers
.
.
.
commit
|
commitdiff
|
tree
2021-12-08
J
o
s
e
ph Sutt
o
n
s4
/
heimdal/lib
/
krb5/p
a
c
.
c: Alig
n
PAC buffers to
m
atch
.
.
.
commit
|
commitdiff
|
tree
2021-12-08
Luke Howard
kdc: u
p
date win
d
c
h
eader guard to ref
l
ect filename
commit
|
commitdiff
|
tree
2021-12-07
Jo
s
eph Sutton
heimdal:kdc
:
Match Win
d
o
w
s
error code f
o
r uns
u
pported
.
.
.
commit
|
commitdiff
|
tree
2021-12-07
Joseph Sutton
hei
m
dal:k
d
c: Properly check for un
s
upported critical
.
.
.
commit
|
commitdiff
|
tree
2021-12-07
Joseph Sutton
heimdal:
Initialis
e
K
DC
r
epl
y
commit
|
commitdiff
|
tree
2021-12-06
Luke
H
owar
d
gss: fix regression in non-8003 che
c
ksu
m
s
commit
|
commitdiff
|
tree
2021-11-30
Luke Howard
hx509: reve
r
t UTF-8
change to hx509 test d
a
ta
commit
|
commitdiff
|
tree
2021-11-29
Andrew B
a
rtlett
Use UTF-8
in KTH
copyright notice
commit
|
commitdiff
|
tree
2021-11-12
Eric Hawicz
I
n
i
tializ
e
local v
a
r
i
ab
l
e in kimpersonate to avo
i
d
.
.
.
commit
|
commitdiff
|
tree
2021-10-19
Robe
r
t Cro
w
ston
Add stub
f
or gss_
a
cquire_cred_impersonate_name()
.
commit
|
commitdiff
|
tree
2021-10-16
R
o
bert Crowston
Fi
x
spel
l
ing/grammar in vario
u
s
P
K
INIT m
e
ssages
commit
|
commitdiff
|
tree
2021-10-15
L
uke How
a
rd
hdb: upd
a
te HDB_
F
_SYNTHETIC_
O
K descr
i
p
t
io
n
commit
|
commitdiff
|
tree
2021-10-11
Lu
k
e Ho
w
ard
gss: _gss_spn
e
go
_
set_se
c
_contex
t
_option return
commit
|
commitdiff
|
tree
2021-10-07
Isaac Bo
u
kris
tests: fix r
e
cent
te
s
t
from using s
y
stem klist
commit
|
commitdiff
|
tree
2021-09-28
Isaac Boukris
krb5: ski
p
c
a
che check in S4U
2
Proxy r
e
q
u
e
sts
commit
|
commitdiff
|
tree
2021-09-23
L
u
ke Howard
g
s
s_
p
reauth
:
remove pr
o
t
ocol change
s
section
f
rom README
commit
|
commitdiff
|
tree
2021-09-23
I
saac Boukris
tests: ticket
a
cqu
i
red by AS ca
n
not be used as evi
d
ence
commit
|
commitdiff
|
tree
2021-09-23
I
s
a
ac B
o
ukris
te
s
ts
:
check
P
AC cl
i
ent name in th
e
non-canon c
a
se
commit
|
commitdiff
|
tree
2021-09-23
Luke Howard
d
o
c: add draft-pe
r
ez-krb-wg-gss-preauth-03
.
txt
commit
|
commitdiff
|
tree
2021-09-23
Luke Howard
kdc: corr
e
ctly generate PAC TGS sig
n
ature
commit
|
commitdiff
|
tree
2021-09-23
L
u
k
e
Howard
kdc
:
m
o
ve _kdc_ve
r
ify_checksum() to misc
.
c
commit
|
commitdiff
|
tree
2021-09-23
Luke
H
o
w
ard
kdc:
u
se
ticke
t
clie
n
t na
m
e
w
hen signing
PAC
commit
|
commitdiff
|
tree
2021-09-23
L
uke Howard
rok
e
n: fi
x
theor
e
tica
l
l
e
ak introduced in 7fbe7be6
commit
|
commitdiff
|
tree
2021-09-21
L
u
k
e Howar
d
various: squash MS
V
C unin
i
tiali
z
ed v
a
r
i
a
ble w
a
rnings
.
.
.
commit
|
commitdiff
|
tree
2021-09-21
Luke Howard
asn1:
initiali
z
e L in
ASN1_MALLOC_ENCOD
E
commit
|
commitdiff
|
tree
2021-09-21
Luke
H
oward
krb5: return K
R
B5KRB_AP
_
ERR_INAP
P
_
C
KSUM if PAC
checksum
.
.
.
commit
|
commitdiff
|
tree
2021-09-21
Luk
e
Howard
kdc: map
K
RB5_PROG_
S
U
M
TYPE_NOSUPP
to KRB5KDC_ERR_SUMTY
P
E_NOSUPP
commit
|
commitdiff
|
tree
2021-09-21
Luke Ho
w
ard
krb5: make keyed
c
heck
s
ums man
d
atory where possible
commit
|
commitdiff
|
tree
2021-09-20
Luke Howard
r
o
ken: che
c
k s
t
rd
u
p succee
d
s in
r
oken_gethostby
_
setup()
commit
|
commitdiff
|
tree
2021-09-20
Isaac
Boukris
krb5: rework PAC
v
ali
d
a
tion
l
oo
p
commit
|
commitdiff
|
tree
2021-09-20
Isaac Boukris
krb5: allow NULL para
m
eter to
k
r
b5_p
a
c_free()
commit
|
commitdiff
|
tree
2021-09-19
Luke
H
o
ward
krb5: fix test_pac format
str
i
n
g
commit
|
commitdiff
|
tree
2021-09-19
Isaac Boukris
krb5: add p
a
c
ticket-si
g
na
t
ure unit tests
commit
|
commitdiff
|
tree
2021-09-19
Is
a
a
c
Boukris
kdc: sign ticket using Wi
n
dow
s
PA
C
commit
|
commitdiff
|
tree
2021-09-19
I
s
aac
B
oukris
kdc: r
e
move KRB5S
i
gnedPath,
t
o be re
p
laced with PAC
commit
|
commitdiff
|
tree
2021-09-19
Isaac Boukris
tests: defau
l
t verify_pa
c
to true in test_ap-
r
eq
commit
|
commitdiff
|
tree
2021-09-19
Isaac
Boukris
t
e
sts:
fix a typo in test_
a
p_r
e
q
commit
|
commitdiff
|
tree
2021-09-19
Isaac Boukris
tests:
add PAC
test for CVE
-
2020-17049 (bronze
b
it)
commit
|
commitdiff
|
tree
2021-09-19
Isaac Boukris
tests: add S4U2Prox
y
te
s
t
with
foreig
n
clie
n
t
commit
|
commitdiff
|
tree
2021-09-19
I
s
aa
c
Boukris
t
e
sts: add S4
U
2Proxy tes
t
s
w
ith TGS evidence ticket
commit
|
commitdiff
|
tree
2021-09-16
L
u
k
e Howard
krb5: specify krb5_enomem() calling convention
commit
|
commitdiff
|
tree
2021-09-13
Luke Ho
w
a
r
d
kdc: don't
leak
s
e
c_context
_
token on ch
e
cksum fail
commit
|
commitdiff
|
tree
2021-09-13
Luke Howard
krb5:
KRB
5
_KRBHST_TKTBRIDGEAP
commit
|
commitdiff
|
tree
2021-09-13
Luke Howard
kdc: validate KDC-REQ-BODY in
v
ar
i
ance in GSS
pr
e
a
u
th
commit
|
commitdiff
|
tree
2021-09-13
Luke Howard
krb5: ad
d
u
n
ke
y
ed
S
H
A
-2
c
hecksum
types
commit
|
commitdiff
|
tree
2021-09-13
Luk
e
Howard
kd
c
:
avoid re-encod
i
ng K
D
C-REQ-BODY
commit
|
commitdiff
|
tree
2021-09-13
Luke Howard
Revert "krb5: zero non
c
e before encoding for GSS pre
a
ut
h
"
commit
|
commitdiff
|
tree
2021-09-09
heitbaum
yyer
r
or:
u
pdate to POSIX standard
commit
|
commitdiff
|
tree
2021-09-09
heit
b
au
m
appveyor: Fix build
commit
|
commitdiff
|
tree
2021-09-08
L
uk
e
How
a
rd
doc: use to
p
-
level Wiki URL
commit
|
commitdiff
|
tree
2021-09-08
L
u
k
e
Howar
d
doc: update bui
l
d instructions UR
L
commit
|
commitdiff
|
tree
2021-09-07
Luke
H
oward
krb5: ze
r
o nonce be
f
ore
en
c
oding
f
or G
S
S
preauth
commit
|
commitdiff
|
tree
2021-09-07
Robe
r
t Cro
w
ston
C
heck
C
L
AN
G
_
FORMAT
i
s
e
xecutab
l
e
.
commit
|
commitdiff
|
tree
next