summaryrefslogtreecommitdiff
path: root/source4/heimdal/kdc
Commit message (Expand)AuthorAgeFilesLines
* CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with unkeyed checksumIsaac Boukris2019-05-071-0/+7
* HEIMDAL:kdc: fix dh->q allocation check in get_dh_param()Stefan Metzmacher2017-12-061-1/+1
* HEIMDAL: don't bother seeing q if not sentLove Hornquist Astrand2017-08-281-3/+6
* HEIMDAL: allow optional q in DH DomainParametersLove Hornquist Astrand2017-08-281-1/+1
* heimdal: Pass extra information to hdb_auth_status() to log success and failuresAndrew Bartlett2017-03-291-4/+35
* heimdal: Add initializer for stack pointersAndrew Bartlett2017-03-271-2/+2
* HEIMDAL:kdc: make it possible to disable the principal based referral detectionStefan Metzmacher2017-03-103-1/+6
* HEIMDAL:kdc: add krb5plugin_windc_pac_pk_generate() hookStefan Metzmacher2016-07-224-4/+22
* HEIMDAL:kdc: reset e_text after successful pre-auth verificationStefan Metzmacher2016-07-221-0/+2
* kerberos: Return enc data on PREAUTH_FAILEDGarming Sam2016-07-051-79/+99
* heimdal make kvno unisgned internallyUri Simchoni2016-05-242-3/+16
* heimdal: encode/decode kvno as signed integerUri Simchoni2016-05-071-1/+1
* s4/heimdal: allow SPNs in AS-REQRalph Boehme2016-04-251-3/+3
* heimdal:kdc: add support for HDB_ERR_WRONG_REALMStefan Metzmacher2015-07-083-1/+58
* heimdal:kdc: generic support for 3part servicePrincipalNamesStefan Metzmacher2015-07-081-3/+2
* heimdal:kdc: remove KRB5_PADATA_CLIENT_CANONICALIZED handlingStefan Metzmacher2015-03-121-52/+0
* heimdal: Ensure that HDB_ERR_NOT_FOUND_HERE, critical for the RODC, is not ov...Andrew Bartlett2015-01-231-4/+19
* heimdal: Really bug in KDC handling of enterprise princsNicolas Williams2015-01-231-3/+2
* heimdal: Fix bug in KDC handling of enterprise principalsNicolas Williams2015-01-231-35/+38
* heimdal: Only indicate successful authentication after successful authzAndrew Bartlett2014-04-021-4/+4
* heimdal: Match windows and return KRB5KDC_ERR_CLIENT_REVOKED when the account...Andrew Bartlett2014-04-021-1/+1
* heimdal: Do not attempt password authentication for locked out accountsAndrew Bartlett2014-04-021-0/+8
* heimdal: remove checking of KDC PAC signature, delegate to wdc pluginAndrew Bartlett2012-01-121-12/+2
* heimdal: handle referrals for 3 part DRSUAPI SPNsAndrew Tridgell2011-10-041-1/+18
* heimdal: Try to handle the PAC checking when we are in a cross-realm environmentAndrew Bartlett2011-09-051-1/+10
* s4:heimdal: import lorikeet-heimdal-201107241840 (commit 0fdf11fa3cdb47df9f53...Stefan Metzmacher2011-07-265-8/+12
* s4:heimdal: import lorikeet-heimdal-201107150856 (commit 48936803fae4a2fb362c...Stefan Metzmacher2011-07-1512-360/+414
* s4:kdc: generate the S4U_DELEGATION_INFO in the regenerated pacStefan Metzmacher2011-06-281-4/+2
* HEIMDAL:kdc: pass down the delegated_proxy_principal to the verify_pac()Stefan Metzmacher2011-06-283-20/+41
* HEIMDAL:kdc/windc_plugin.h: KRB5_WINDC_PLUGIN_MINOR 4 => 5Stefan Metzmacher2011-06-281-2/+2
* HEIMDAL:kdc: don't allow self delegation if a backend check_constrained_deleg...Stefan Metzmacher2011-06-241-4/+4
* HEIMDAL:kdc: pass down the server hdb_entry_ex to check_constrained_delegation()Stefan Metzmacher2011-06-241-5/+19
* HEIMDAL:kdc: use the correct client realm in the EncTicketPartStefan Metzmacher2011-06-241-1/+1
* HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy caseStefan Metzmacher2011-05-181-13/+38
* HEIMDAL:kdc: pass the correct principal name for the resulting service ticketStefan Metzmacher2011-05-181-38/+36
* HEIMDAL:kdc: let check_PAC() to verify the incoming server and krbtgt cheksumsStefan Metzmacher2011-05-181-4/+7
* Merge new lorikeet heimdal, revision 85ed7247f515770c73b1f1ced1739f6ce19d75d2Jelmer Vernooij2011-03-142-3/+4
* HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_requ...Stefan Metzmacher2011-03-041-0/+5
* heimdal Pass F_CANON down to the hdb layer for servers in AS-REP as wellAndrew Bartlett2011-02-171-2/+1
* s4:heimdal: import lorikeet-heimdal-201101310455 (commit aa88eb1a05c4985cc23f...Andrew Bartlett2011-02-021-0/+4
* heimdal_build: Add version-script for kdc.Jelmer Vernooij2010-12-171-0/+21
* s4:heimdal: import lorikeet-heimdal-201012010201 (commit 81fe27bcc0148d410ca4...Andrew Bartlett2010-12-014-1049/+7
* heimdal Build ticket with the canonical server nameAndrew Bartlett2010-11-161-1/+1
* heimdal Fetch the client before the PAC check, but after obtaining krbtgt_outAndrew Bartlett2010-11-151-31/+30
* s4:heimdal - fix the return code of a non-void functionMatthias Dieter Wallnöfer2010-11-151-0/+2
* heimdal Fix handling of backwards cross-realm detection for Samba4Andrew Bartlett2010-11-151-18/+48
* s4:heimdal: import lorikeet-heimdal-201011102149 (commit 5734d03c20e104c8f455...Andrew Bartlett2010-11-151-19/+25
* heimdal Return HDB_ERR_NOT_FOUND_HERE to the callerAndrew Bartlett2010-11-123-11/+34
* s4:heimdal: import lorikeet-heimdal-201010022046 (commit 1bea031b9404b14114b0...Andrew Bartlett2010-10-034-18/+28
* s4:heimdal: import lorikeet-heimdal-201009250123 (commit 42cabfb5b683dbcb97d5...Matthieu Patou2010-10-035-28/+43
View Lorry Controller Status