summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Be more parsimonious with /dev/random when using the NSS PRNGnssGreg Hudson2010-10-021-3/+6
* Make the NSS back end compile and work again in the presence of theGreg Hudson2010-10-026-18/+197
* Merge r24242:24397 from trunk to branches/nss. This will break theGreg Hudson2010-09-30283-4096/+13387
* Wrap cached symkeys in a structure containing the current pid, so thatGreg Hudson2010-09-301-16/+41
* Update NSS branch readme. Give up on the code reorganization bulletGreg Hudson2010-09-301-6/+0
* Apply Red Hat copyright and license statements (using the one fromGreg Hudson2010-09-3015-366/+387
* Follow-up to r24365: call both PK11_Finalize and PK11_DestroyContextGreg Hudson2010-09-301-5/+16
* Remove an NSS branch issue which has been dealt withGreg Hudson2010-09-291-35/+8
* Make DO_FAST_XOR code unconditional in the NSS back endGreg Hudson2010-09-291-6/+0
* Make USE_OPAQUE_KEYS unconditional in the NSS back endGreg Hudson2010-09-291-28/+0
* Remove NSS_LOOKUP_STRING code since we aren't likely to need itGreg Hudson2010-09-291-26/+0
* Clean up hash and digest contexts in the back end to avoid refcountGreg Hudson2010-09-282-2/+2
* Use the PK11_DestroyContext() instead of PK11_Finalize() to destroyGreg Hudson2010-09-281-1/+1
* Use the PK11_DestroyContext() instead of PK11_Finalize() to destroyGreg Hudson2010-09-271-6/+6
* Revert unintended change in last commit to k5_nss_init()Greg Hudson2010-09-271-1/+1
* Fix cleanup handler in k5_nss_init to return an error if there is oneGreg Hudson2010-09-271-2/+2
* When using stream ciphers with NSS, use a loopback pointer instead ofGreg Hudson2010-09-261-15/+37
* When NSS is the crypto implementation, use the NSS PRNG. Avoids theGreg Hudson2010-09-254-12/+82
* In the NSS crypto back end, add mutex protection and fork protectionGreg Hudson2010-09-257-25/+151
* In the NSS mit_des_string_to_key_int, zero out pbe_params beforeGreg Hudson2010-09-111-0/+1
* k5_ as an internal prefix is now formally okay, so remove that bulletGreg Hudson2010-08-241-4/+0
* Document the nss branch purpose and current issuesGreg Hudson2010-08-211-0/+52
* Style pass over the NSS back endGreg Hudson2010-08-2124-664/+627
* Remove unneeded file in NSS back endGreg Hudson2010-08-191-3/+0
* Make NSS back-end build when the build directory is separate from theGreg Hudson2010-08-192-2/+2
* Simplify the nss backend configure changesGreg Hudson2010-08-191-13/+9
* Merge changes from branches/krb5-1-8-nss. Omit the t_encrypt.c changesGreg Hudson2010-08-1947-1/+3583
* Create a branch for the NSS libk5crypto back endGreg Hudson2010-08-190-0/+0
* Allow krb5_gss_register_acceptor_identity to unset keytab nameGreg Hudson2010-08-192-10/+8
* Add GIC option for password/account expiration callbackGreg Hudson2010-08-128-24/+273
* In AS replies, set the key-expiration field to the minimum of accountGreg Hudson2010-08-121-1/+12
* Correct the documentation for the start_kadmind keyword in k5test.pyGreg Hudson2010-08-121-1/+1
* Remove two unused source files in lib/gssapi/genericGreg Hudson2010-08-122-118/+0
* Move the password expiry warning code out ofGreg Hudson2010-08-101-84/+92
* Use xdr_int32 instead of xdr_u_int in xdr_krb5_enctype(), sinceGreg Hudson2010-07-261-1/+1
* Fix XDR decoding of large values in xdr_u_intGreg Hudson2010-07-261-1/+1
* Addendum to r24200: fix kdb5_ldap_util call site ofGreg Hudson2010-07-211-1/+1
* Revert the part of r24157 which added the dal_version argument to theGreg Hudson2010-07-217-20/+19
* Get the kdb_hdb module to compile again. Probably still buggy,Greg Hudson2010-07-204-293/+161
* In kdb5_util's kdb5_ldap_create(), add back the assignment ofGreg Hudson2010-07-191-0/+1
* Allow Microsoft HMAC-MD5 checksum types to use non-RC4 keysGreg Hudson2010-07-192-4/+6
* In the DAL documentation, describe how a module can supply referralGreg Hudson2010-07-191-1/+4
* Add check_allowed_to_delegate to the DAL with a corresponding libkdb5Greg Hudson2010-07-1514-236/+72
* Addendum to r24182: Fix a comment referencing the db_invokeGreg Hudson2010-07-151-4/+2
* Add refresh_config to the DAL with a corresponding libkdb5 API,Greg Hudson2010-07-156-9/+25
* Addendum to r24185: make audit_as_req return void, since it's anGreg Hudson2010-07-138-33/+24
* Add audit_as_req to the DAL with a corresponding libkdb5 API,Greg Hudson2010-07-1313-103/+77
* Add check_policy_as and check_policy_tgs to the DAL table withGreg Hudson2010-07-1314-174/+156
* Add check_transited_realms to the DAL table with a correspondingGreg Hudson2010-07-126-40/+40
* Add sign_authdata to the DAL table with a corresponding libkdb5 API,Greg Hudson2010-07-128-116/+111