summaryrefslogtreecommitdiff
path: root/source4/heimdal/kdc
AgeCommit message (Expand)AuthorFilesLines
2012-01-12heimdal: remove checking of KDC PAC signature, delegate to wdc pluginAndrew Bartlett1-12/+2
2011-10-04heimdal: handle referrals for 3 part DRSUAPI SPNsAndrew Tridgell1-1/+18
2011-09-05heimdal: Try to handle the PAC checking when we are in a cross-realm environmentAndrew Bartlett1-1/+10
2011-07-26s4:heimdal: import lorikeet-heimdal-201107241840 (commit 0fdf11fa3cdb47df9f53...Stefan Metzmacher5-8/+12
2011-07-15s4:heimdal: import lorikeet-heimdal-201107150856 (commit 48936803fae4a2fb362c...Stefan Metzmacher12-360/+414
2011-06-28s4:kdc: generate the S4U_DELEGATION_INFO in the regenerated pacStefan Metzmacher1-4/+2
2011-06-28HEIMDAL:kdc: pass down the delegated_proxy_principal to the verify_pac()Stefan Metzmacher3-20/+41
2011-06-28HEIMDAL:kdc/windc_plugin.h: KRB5_WINDC_PLUGIN_MINOR 4 => 5Stefan Metzmacher1-2/+2
2011-06-24HEIMDAL:kdc: don't allow self delegation if a backend check_constrained_deleg...Stefan Metzmacher1-4/+4
2011-06-24HEIMDAL:kdc: pass down the server hdb_entry_ex to check_constrained_delegation()Stefan Metzmacher1-5/+19
2011-06-24HEIMDAL:kdc: use the correct client realm in the EncTicketPartStefan Metzmacher1-1/+1
2011-05-18HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy caseStefan Metzmacher1-13/+38
2011-05-18HEIMDAL:kdc: pass the correct principal name for the resulting service ticketStefan Metzmacher1-38/+36
2011-05-18HEIMDAL:kdc: let check_PAC() to verify the incoming server and krbtgt cheksumsStefan Metzmacher1-4/+7
2011-03-14Merge new lorikeet heimdal, revision 85ed7247f515770c73b1f1ced1739f6ce19d75d2Jelmer Vernooij2-3/+4
2011-03-04HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_requ...Stefan Metzmacher1-0/+5
2011-02-17heimdal Pass F_CANON down to the hdb layer for servers in AS-REP as wellAndrew Bartlett1-2/+1
2011-02-02s4:heimdal: import lorikeet-heimdal-201101310455 (commit aa88eb1a05c4985cc23f...Andrew Bartlett1-0/+4
2010-12-17heimdal_build: Add version-script for kdc.Jelmer Vernooij1-0/+21
2010-12-01s4:heimdal: import lorikeet-heimdal-201012010201 (commit 81fe27bcc0148d410ca4...Andrew Bartlett4-1049/+7
2010-11-16heimdal Build ticket with the canonical server nameAndrew Bartlett1-1/+1
2010-11-15heimdal Fetch the client before the PAC check, but after obtaining krbtgt_outAndrew Bartlett1-31/+30
2010-11-15s4:heimdal - fix the return code of a non-void functionMatthias Dieter Wallnöfer1-0/+2
2010-11-15heimdal Fix handling of backwards cross-realm detection for Samba4Andrew Bartlett1-18/+48
2010-11-15s4:heimdal: import lorikeet-heimdal-201011102149 (commit 5734d03c20e104c8f455...Andrew Bartlett1-19/+25
2010-11-12heimdal Return HDB_ERR_NOT_FOUND_HERE to the callerAndrew Bartlett3-11/+34
2010-10-03s4:heimdal: import lorikeet-heimdal-201010022046 (commit 1bea031b9404b14114b0...Andrew Bartlett4-18/+28
2010-10-03s4:heimdal: import lorikeet-heimdal-201009250123 (commit 42cabfb5b683dbcb97d5...Matthieu Patou5-28/+43
2010-10-02heimdal use returned server entry from HDB to compare realmsAndrew Bartlett1-1/+1
2010-09-29heimdal Add support for extracting a particular KVNO from the databaseAndrew Bartlett5-17/+51
2010-04-10s4:heimdal Create a new PAC when impersonating a user with S4U2SelfAndrew Bartlett1-4/+46
2010-04-10s4:heimdal Add hooks to check with the DB before we allow s4u2selfAndrew Bartlett1-4/+36
2010-03-27s4:heimdal: import lorikeet-heimdal-201003262338 (commit f4e0dc17709829235f05...Andrew Bartlett9-16/+11
2010-03-27s4:heimdal: import lorikeet-heimdal-201001120029 (commit a5e675fed7c5db8a7370...Andrew Bartlett9-166/+197
2009-11-24heimdal Fix invalid format stringAndrew Bartlett1-1/+1
2009-11-13s4:heimdal: import lorikeet-heimdal-200911122202 (commit 9291fd2d101f3eecec55...Andrew Bartlett7-149/+207
2009-11-13s4:heimdal: import lorikeet-heimdal-200909210500 (commit 290db8d23647a27c39b9...Andrew Bartlett4-98/+145
2009-10-03heimdal kerberos - fix memory leak (free the plugin list always - not only in...Matthias Dieter Wallnöfer1-1/+1
2009-08-05s4:heimdal: import lorikeet-heimdal-200908050050 (commit 8714779fa7376fd9f776...Andrew Bartlett4-20/+25
2009-07-28s4:kerberos Add support for user principal names in certificatesAndrew Bartlett2-18/+21
2009-07-17s4:heimdal: import lorikeet-heimdal-200907162216 (commit d09910d6803aad96b52e...Andrew Bartlett1-17/+22
2009-07-16s4:heimdal: import lorikeet-heimdal-200907152325 (commit 2bef9cd5378c01e9c2a7...Andrew Bartlett3-25/+59
2009-06-30s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookupsAndrew Bartlett2-22/+28
2009-06-18s4:kdc Allow a password change when the password is expiredAndrew Bartlett6-27/+35
2009-06-12s4:heimdal: import lorikeet-heimdal-200906080040 (commit 904d0124b46eed7a8ad6...Andrew Bartlett13-1725/+1108
2008-11-04Re-add support for supporting the PAC over domain trusts.Andrew Bartlett1-19/+17
2008-10-28s4: import lorikeet-heimdal-200810271034Stefan Metzmacher18-951/+951
2008-10-06Allow the PAC to be passed along during cross-realm authenticationAndrew Bartlett1-18/+16
2008-08-26heimdal: import heimdal's trunk svn rev 23697 + lorikeet-heimdal patchesStefan Metzmacher18-42/+66
2008-08-26heimdal_build: autogenerate the heimdal private/proto headersStefan Metzmacher2-379/+0