sssd - System Security Services Daemon

Age	Commit message (Collapse)	Author	Files	Lines
2012-05-22	KRB5: Avoid NULL-dereference with empty keytab	Stephen Gallagher	1	-7/+13
	https://fedorahosted.org/sssd/ticket/1330
2012-05-07	Limit krb5_get_init_creds_keytab() to etypes in keytab	Stef Walter	1	-0/+137
	* Load the enctypes for the keys in the keytab and pass them to krb5_get_init_creds_keytab(). * This fixes the problem where the server offers a enctype that krb5 supports, but we don't have a key for in the keytab. https://bugzilla.redhat.com/show_bug.cgi?id=811375
2012-05-07	Remove erroneous failure message in find_principal_in_keytab	Stef Walter	1	-1/+1
	* When it's actually a failure, then the callers will print a message. Fine tune this.
2012-04-05	Clean up log messages about keytab_name	Stephen Gallagher	1	-11/+19
	There were many places where we were printing (null) to the logs because a NULL keytab name tells libkrb5 to use its configured default instead of a particular path. This patch should clean up all uses of this to print "default" in the logs. https://fedorahosted.org/sssd/ticket/1288
2012-03-29	Fix off-by-one error in principal selection	Jakub Hrozek	1	-3/+3
	https://fedorahosted.org/sssd/ticket/1269
2012-03-26	Always initialize the returned data in sss_krb5_princ_realm()	Sumit Bose	1	-0/+3

2012-01-17	Raise the debug level of two very noisy statements	Stephen Gallagher	1	-2/+3

2011-12-22	Add compatibility layer for Heimdal Kerberos implementation	Stephen Gallagher	1	-12/+58

2011-11-02	Add wrapper for krb5_get_init_creds_opt_set_canonicalize	Jan Zeleny	1	-0/+10

2011-05-16	Fixed unitialized pointer in select_principal_from_keytab	Jan Zeleny	1	-1/+1
	https://fedorahosted.org/sssd/ticket/857
2011-05-16	Fixed unitialized return value in match_principal	Jan Zeleny	1	-2/+1
	https://fedorahosted.org/sssd/ticket/858
2011-05-05	Added some kerberos functions for building on RHEL5	Jan Zeleny	1	-5/+178

2011-04-25	Modify principal selection for keytab authentication	Jan Zeleny	1	-2/+172
	Currently we construct the principal as host/fqdn@REALM. The problem with this is that this principal doesn't have to be in the keytab. In that case the provider fails to start. It is better to scan the keytab and find the most suitable principal to use. Only in case no suitable principal is found the backend should fail to start. The second issue solved by this patch is that the realm we are authenticating the machine to can be in general different from the realm our users are part of (in case of cross Kerberos trust). The patch adds new configuration option SDAP_SASL_REALM. https://fedorahosted.org/sssd/ticket/781
2011-04-25	Extend and move function for finding principal in keytab	Jan Zeleny	1	-0/+155
	The function now supports finding principal in keytab not only based on realm, but based on both realm and primary/instance parts. The function also supports * wildcard at the beginning or at the end of primary principal part. The function for finding principal has been moved to util/sss_krb5.c, so it can be used in other parts of the code.
2010-12-17	Fix unchecked return value in sss_krb5_verify_keytab_ex	Stephen Gallagher	1	-1/+8
	https://fedorahosted.org/sssd/ticket/711
2010-12-07	Add support for FAST in krb5 provider	Sumit Bose	1	-0/+48

2010-11-18	Add missing error code	Sumit Bose	1	-0/+1

2010-09-23	Use new MIT krb5 API for better password expiration warnings	Sumit Bose	1	-1/+14

2010-08-03	Validate keytab at startup	Jakub Hrozek	1	-0/+153
	In addition to validating the keytab everytime a TGT is requested, we also validate the keytab on back end startup to give early warning that the keytab is not usable. Fixes: #556
2010-02-18	Rename server/ directory to src/	Stephen Gallagher	1	-0/+196
	Also update BUILD.txt