summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* make reindentanonymousSam Hartman2009-12-2812-91/+90
* Declare functions in this header inline to avoid warnings for unused codeSam Hartman2009-12-231-4/+4
* Implement server side of PA_PKINIT_KX for anonymous draftSam Hartman2009-12-231-2/+67
* Always supply a padata item to the return callback in a preauth plugin so tha...Sam Hartman2009-12-231-3/+6
* Move symbols needed by pkinit pa_pkinit_k x to k5-int-pkinit.hSam Hartman2009-12-232-11/+11
* Client side of PA_PKINIT_KXSam Hartman2009-12-232-1/+71
* Fix prototypeSam Hartman2009-12-231-0/+1
* Add support for kadmin -nSam Hartman2009-12-236-7/+55
* Change kinit -n logic to support an interface for both fully andSam Hartman2009-12-235-52/+101
* For fully anonymous kadmin, the KDC will change the realm to theSam Hartman2009-12-231-19/+20
* Per discussion with Greg and Luke, hold an alias to the out_ccache.Sam Hartman2009-12-231-9/+2
* Use global constant for string components of anonymous and wellknownSam Hartman2009-12-233-5/+9
* Ignore transited realm checking for anonymous realmSam Hartman2009-12-231-0/+6
* Add kinit -n for anonymousSam Hartman2009-12-231-7/+27
* Permit the realm to be canonicalized from any realm to the anonymousSam Hartman2009-12-231-0/+3
* pkinit authentication only works for TGTSam Hartman2009-12-231-2/+12
* Implement support for the anonymous name type in GSS-APISam Hartman2009-12-232-2/+18
* Anonymous client side supportSam Hartman2009-12-231-1/+9
* Change krb5_get_ap_tag macro to remove warningsSam Hartman2009-12-231-1/+1
* KDC policy handling for anonymous tickets:Sam Hartman2009-12-232-3/+8
* Also update principal in replySam Hartman2009-12-231-0/+1
* Correct logic in client pluginSam Hartman2009-12-231-1/+1
* Set anonymous ticket flagSam Hartman2009-12-232-2/+3
* Update flag values for anonymous kdc option and ticket flagSam Hartman2009-12-231-4/+2
* Only check for anonymous if pkinit_identity is given a principal; the KDC doe...Sam Hartman2009-12-231-1/+1
* Because there is only one realm field in the kdc request, the KDCSam Hartman2009-12-232-1/+17
* Implement support for unsigned pkinit messagesSam Hartman2009-12-234-41/+85
* ad-initial-verified-cas logic brokenSam Hartman2009-12-231-58/+5
* Revert "In case of anonymous client principal, use the realm of the server"Sam Hartman2009-12-231-29/+19
* In case of anonymous client principal, use the realm of the serverSam Hartman2009-12-231-19/+29
* If the anonymous principal is used, then do not initialize theSam Hartman2009-12-232-54/+60
* Add cms_contentinfo_create to create the pkinit content info; this isSam Hartman2009-12-232-21/+109
* signed vs unsigned fixesSam Hartman2009-12-233-13/+17
* Add anonymous principal and name typeSam Hartman2009-12-233-0/+40
* anonymous branchSam Hartman2009-12-230-0/+0
* fast negotiation projecSam Hartman2009-12-1422-163/+790
* Don't use sizeof(pointertype) to get the length of an allocated arrayTom Yu2009-12-101-1/+1
* Add comments to make it slightly clearer howGreg Hudson2009-12-101-1/+2
* Restructure the crypto checksum implementation to minimizeGreg Hudson2009-12-1046-1299/+864
* Change file holder for krb5int_check_clockskew. Minor Style changes per code ...Zhanna Tsitkov2009-12-092-41/+40
* Remove dependency on /bin/csh in test suiteEzra Peisach2009-12-081-2/+14
* Mark and reindent lib/gssapi, with some exceptionsTom Yu2009-12-0865-312/+318
* Mark lib/apputilsTom Yu2009-12-072-0/+4
* Mark and reindent util, with some exceptionsTom Yu2009-12-0753-3413/+3472
* handle negative enctypes betterTom Yu2009-12-072-4/+5
* Initialize ihash_iov in case fall through to cleanup handler and tryEzra Peisach2009-12-061-1/+1
* Remove the ivec parameters from the keyhash provider functions, asGreg Hudson2009-12-0611-35/+26
* Make dependGreg Hudson2009-12-062-52/+64
* Make the libk5crypto hash_provider interface take crypto_iov listsGreg Hudson2009-12-0629-490/+297
* In the built-in des3 provider, remove the unused version ofGreg Hudson2009-12-061-29/+3