summaryrefslogtreecommitdiff
path: root/source4/heimdal/kdc/krb5tgs.c
Commit message (Expand)AuthorAgeFilesLines
* CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed checksumIsaac Boukris2019-05-071-0/+7
* HEIMDAL:kdc: make it possible to disable the principal based referral detectionStefan Metzmacher2017-03-101-1/+3
* HEIMDAL:kdc: add krb5plugin_windc_pac_pk_generate() hookStefan Metzmacher2016-07-221-1/+1
* heimdal make kvno unisgned internallyUri Simchoni2016-05-241-2/+15
* heimdal:kdc: add support for HDB_ERR_WRONG_REALMStefan Metzmacher2015-07-081-0/+26
* heimdal:kdc: generic support for 3part servicePrincipalNamesStefan Metzmacher2015-07-081-3/+2
* heimdal: remove checking of KDC PAC signature, delegate to wdc pluginAndrew Bartlett2012-01-121-12/+2
* heimdal: handle referrals for 3 part DRSUAPI SPNsAndrew Tridgell2011-10-041-1/+18
* heimdal: Try to handle the PAC checking when we are in a cross-realm environmentAndrew Bartlett2011-09-051-1/+10
* s4:heimdal: import lorikeet-heimdal-201107241840 (commit 0fdf11fa3cdb47df9f53...Stefan Metzmacher2011-07-261-4/+8
* s4:heimdal: import lorikeet-heimdal-201107150856 (commit 48936803fae4a2fb362c...Stefan Metzmacher2011-07-151-46/+58
* s4:kdc: generate the S4U_DELEGATION_INFO in the regenerated pacStefan Metzmacher2011-06-281-4/+2
* HEIMDAL:kdc: pass down the delegated_proxy_principal to the verify_pac()Stefan Metzmacher2011-06-281-14/+31
* HEIMDAL:kdc: don't allow self delegation if a backend check_constrained_deleg...Stefan Metzmacher2011-06-241-4/+4
* HEIMDAL:kdc: pass down the server hdb_entry_ex to check_constrained_delegation()Stefan Metzmacher2011-06-241-5/+19
* HEIMDAL:kdc: use the correct client realm in the EncTicketPartStefan Metzmacher2011-06-241-1/+1
* HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy caseStefan Metzmacher2011-05-181-13/+38
* HEIMDAL:kdc: pass the correct principal name for the resulting service ticketStefan Metzmacher2011-05-181-38/+36
* HEIMDAL:kdc: let check_PAC() to verify the incoming server and krbtgt cheksumsStefan Metzmacher2011-05-181-4/+7
* HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_requ...Stefan Metzmacher2011-03-041-0/+5
* heimdal Build ticket with the canonical server nameAndrew Bartlett2010-11-161-1/+1
* heimdal Fetch the client before the PAC check, but after obtaining krbtgt_outAndrew Bartlett2010-11-151-31/+30
* heimdal Fix handling of backwards cross-realm detection for Samba4Andrew Bartlett2010-11-151-18/+48
* heimdal Return HDB_ERR_NOT_FOUND_HERE to the callerAndrew Bartlett2010-11-121-5/+22
* s4:heimdal: import lorikeet-heimdal-201010022046 (commit 1bea031b9404b14114b0...Andrew Bartlett2010-10-031-4/+4
* s4:heimdal: import lorikeet-heimdal-201009250123 (commit 42cabfb5b683dbcb97d5...Matthieu Patou2010-10-031-9/+19
* heimdal use returned server entry from HDB to compare realmsAndrew Bartlett2010-10-021-1/+1
* heimdal Add support for extracting a particular KVNO from the databaseAndrew Bartlett2010-09-291-14/+37
* s4:heimdal Create a new PAC when impersonating a user with S4U2SelfAndrew Bartlett2010-04-101-4/+46
* s4:heimdal Add hooks to check with the DB before we allow s4u2selfAndrew Bartlett2010-04-101-4/+36
* s4:heimdal: import lorikeet-heimdal-201003262338 (commit f4e0dc17709829235f05...Andrew Bartlett2010-03-271-2/+0
* s4:heimdal: import lorikeet-heimdal-201001120029 (commit a5e675fed7c5db8a7370...Andrew Bartlett2010-03-271-2/+3
* heimdal Fix invalid format stringAndrew Bartlett2009-11-241-1/+1
* s4:heimdal: import lorikeet-heimdal-200911122202 (commit 9291fd2d101f3eecec55...Andrew Bartlett2009-11-131-59/+107
* s4:heimdal: import lorikeet-heimdal-200909210500 (commit 290db8d23647a27c39b9...Andrew Bartlett2009-11-131-10/+15
* s4:heimdal: import lorikeet-heimdal-200907162216 (commit d09910d6803aad96b52e...Andrew Bartlett2009-07-171-17/+22
* s4:heimdal: import lorikeet-heimdal-200907152325 (commit 2bef9cd5378c01e9c2a7...Andrew Bartlett2009-07-161-15/+29
* s4:kdc Allow a password change when the password is expiredAndrew Bartlett2009-06-181-4/+4
* s4:heimdal: import lorikeet-heimdal-200906080040 (commit 904d0124b46eed7a8ad6...Andrew Bartlett2009-06-121-35/+27
* Re-add support for supporting the PAC over domain trusts.Andrew Bartlett2008-11-041-19/+17
* s4: import lorikeet-heimdal-200810271034Stefan Metzmacher2008-10-281-25/+25
* Allow the PAC to be passed along during cross-realm authenticationAndrew Bartlett2008-10-061-18/+16
* heimdal: import heimdal's trunk svn rev 23697 + lorikeet-heimdal patchesStefan Metzmacher2008-08-261-5/+21
* heimdal: update to lorikeet-heimdal rev 801Stefan Metzmacher2008-08-011-239/+400
* Merge lorikeet-heimdal -r 787 into Samba4 tree.Andrew Bartlett2008-03-191-8/+16
* r23678: Update to current lorikeet-heimdal (-r 767), which should fix theAndrew Bartlett2007-10-101-16/+16
* r23456: Update Samba4 to current lorikeet-heimdal.Andrew Bartlett2007-10-101-14/+21
* r20640: Commit part 2/2Andrew Bartlett2007-10-101-110/+228
* r19604: This is a massive commit, and I appologise in advance for it's size.Andrew Bartlett2007-10-101-0/+1781