summaryrefslogtreecommitdiff
path: root/src/kdc
Commit message (Expand)AuthorAgeFilesLines
* Add pac_privsvr_enctype string attributeGreg Hudson2023-03-274-13/+78
* Make k5buf more flexible for binary dataGreg Hudson2023-03-241-2/+2
* Fix t_ndr to return a define value from main()Greg Hudson2023-01-271-0/+1
* Don't issue session keys with deprecated enctypesGreg Hudson2023-01-231-0/+10
* In KDC, assume all services support aes256-sha1Greg Hudson2023-01-231-0/+4
* Fix null deref in KDC when decoding invalid NDRGreg Hudson2022-11-032-10/+36
* Refactor KDC TGS processing codeGreg Hudson2022-10-038-824/+872
* Avoid protocol error constants in KDC codeGreg Hudson2022-08-125-126/+103
* Remove kdc_context, tgs_server macros in KDCGreg Hudson2022-07-2010-581/+495
* Free verto context later in KDC cleanupGreg Hudson2022-06-081-1/+1
* Remove krb5_aprof_init() and krb5_aprof_finish()Greg Hudson2022-05-181-36/+32
* Pass client flag to KDB for client preauth matchGreg Hudson2022-01-271-1/+1
* Implement replaced_reply_key input to issue_pac()Greg Hudson2022-01-274-14/+22
* Add replace_reply_key kdcpreauth callbackGreg Hudson2022-01-273-5/+23
* Replace AD-SIGNEDPATH with minimal PACsGreg Hudson2022-01-128-659/+669
* Add minimal KDC MS-RPCE (NDR) encoder/decoderGreg Hudson2022-01-124-2/+515
* Issue an error from KDC on S4U2Self failuresAndreas Schneider2021-12-051-3/+2
* Always use platform PRNGGreg Hudson2021-10-122-48/+0
* Fix KDC null deref on TGS inner body null serverGreg Hudson2021-08-191-0/+5
* Modernize kdc_preauth_ec.cGreg Hudson2021-07-151-110/+109
* Fix KDC null deref on bad encrypted challengeJoseph Sutton2021-07-121-1/+2
* Fix many unlikely memory leaksRobbie Harwood2021-07-011-14/+13
* Rewrite not-yet-covered dejagnu tests in PythonGreg Hudson2021-05-211-0/+14
* Synchronize command-line option documentationRobbie Harwood2021-02-171-2/+2
* Reduce warnings from mainline autoconfGreg Hudson2020-12-071-14/+2
* Move more KDC checks to validate_tgs_request()Greg Hudson2020-10-294-245/+275
* Minimize usage of tgs_server in KDCGreg Hudson2020-10-025-78/+46
* Avoid passing DB entry structures in KDCGreg Hudson2020-09-305-40/+41
* Allow aliases when matching U2U second ticketIsaac Boukris2020-09-221-1/+1
* Adjust KDC alias helper function contractIsaac Boukris2020-09-222-7/+11
* Improve KDC alias checking for S4U requestsIsaac Boukris2020-09-141-49/+25
* Avoid using LMDB environments across forksGreg Hudson2020-07-061-4/+7
* Fix KDC choice to send encrypted S4U_X509_USERGreg Hudson2020-06-291-2/+1
* Add KDC helpers for current key and kvnoGreg Hudson2020-05-157-67/+44
* Prevent use of invalid local TGT keyGreg Hudson2020-05-141-5/+5
* Omit KDC indicator check for S4U2Self requestsGreg Hudson2020-05-071-7/+7
* Fix typos in commentsGreg Hudson2020-04-083-3/+3
* Change KDC constrained-delegation precedence orderIsaac Boukris2020-03-091-91/+76
* Fix AS-REQ checking of KDB-modified indicatorsGreg Hudson2020-02-211-7/+7
* Always use S4U2Proxy second ticket parsed authdataIsaac Boukris2020-02-111-3/+9
* Refactor KDC authdata list management helpersGreg Hudson2020-02-063-127/+62
* Put KDB authdata firstIsaac Boukris2020-02-051-3/+6
* Allow cross-realm RBCD with PAC and other authdataIsaac Boukris2020-01-221-13/+8
* Fix KDC crash in handle_signticketIsaac Boukris2020-01-172-15/+16
* Check cross-realm TGT name for RBCD requestsIsaac Boukris2020-01-131-2/+4
* Work around macOS SIP in the test suiteGreg Hudson2020-01-072-1/+2
* Remove KRB5_KDB_FLAG_ALIAS_OKIsaac Boukris2019-12-284-11/+4
* Do not always canonicalize enterprise principalsIsaac Boukris2019-12-281-5/+4
* Simplify AS request time handling in KDCGreg Hudson2019-11-032-25/+3
* Record start time of AS requests earlier in KDCAndreas Schneider2019-11-031-4/+5
View Lorry Controller Status