summaryrefslogtreecommitdiff
path: root/auth/gensec
AgeCommit message (Expand)AuthorFilesLines
2026-03-31auth: Call ZERO_ARRAY()/ZERO_STRUCT() for sensitive variables on stackPavel Filipenský1-0/+2
2026-02-17auth/credentials: Fix regression with --use-kerberos=desired for smbclientNoel Power1-5/+0
2024-12-12libcli/auth: add infrastructure for netr_ServerAuthenticateKerberos()Stefan Metzmacher1-0/+31
2024-12-05gensec: add GENSEC_FEATURE_NO_DELEGATION flag to avoid GSS_C_DELEG[_POLICY]_FLAGStefan Metzmacher1-0/+1
2024-10-10gensec:spnego: ignore trailing bytes in SPNEGO_SERVER_START stateStefan Metzmacher1-7/+17
2024-07-18auth:gensec: Fully initialize struct spnego_dataAndreas Schneider1-7/+6
2024-06-24spnego: Fix typosVolker Lendecke1-3/+3
2024-06-24gensec: Fix whitespaceVolker Lendecke1-9/+9
2024-06-04lib: gensec.h references NTTIME, add time.hVolker Lendecke1-0/+1
2024-06-04gensec: Simplify gensec_security_by_fn()Volker Lendecke1-10/+3
2024-06-04gensec: Filter out disabled mechs in gensec_security_mechs()Volker Lendecke3-29/+6
2024-06-04gensec: Refactor gensec_security_mechs()Volker Lendecke1-76/+69
2024-06-04gensec: Simplify gensec_security_by_*Volker Lendecke1-89/+86
2024-05-07auth/gensec: add gensec_get_unparsed_target_principal() helperStefan Metzmacher2-0/+20
2024-05-07auth/gensec: add gensec_kerberos_possible() helperStefan Metzmacher2-0/+65
2024-04-23auth/gensec: remove useless client_use_spnego_principal usageStefan Metzmacher1-10/+0
2024-04-23auth/gensec: add gensec_set_channel_bindings() functionStefan Metzmacher4-0/+90
2024-04-23gensec: sort_gensec uses NUMERIC_CMPDouglas Bagnall1-1/+1
2023-12-08auth:gensec: Zero digest array in error caseJoseph Sutton1-2/+1
2023-11-30auth/gensec: Return more consistent status codes on gnutls hashing failureJoseph Sutton1-6/+6
2023-10-25auth: Fix code spellingJoseph Sutton1-3/+3
2023-09-11auth: Fix code spellingJoseph Sutton1-1/+1
2023-06-30Remove rudundent check and fallback for AES CFB8 as we now require GnuTLS 3.6.13Andrew Bartlett1-40/+0
2023-06-25auth: Add functionality to log client and server policy informationJoseph Sutton1-1/+3
2023-03-28auth: Fix code spellingAndreas Schneider4-4/+4
2022-06-10spelling: connnect encrytion exisit expection explicit invalide missmatch par...Michael Tokarev1-2/+2
2022-06-09lib/util: Change function to mem_equal_const_time()Joseph Sutton1-5/+5
2022-06-09auth: Use constant-time memcmp when comparing sensitive buffersJoseph Sutton1-2/+2
2021-12-10auth: Fix a typo in auth/gensec/ncalrpc.cVolker Lendecke1-1/+1
2021-11-13IPA DC: add missing checksAlexander Bokovoy1-0/+1
2021-11-09CVE-2020-25719 CVE-2020-25717: auth/gensec: always require a PAC in domain mo...Stefan Metzmacher1-4/+23
2021-08-03auth:gensec: Use lpcfg_weak_crypto()Andreas Schneider1-2/+3
2021-04-27gensec: Slightly simplify gensec_generate_session_info_pac()Volker Lendecke1-11/+19
2021-04-06gensec: Remove gensec_security_all(), it was only used internallyVolker Lendecke2-9/+2
2020-11-03auth:creds: Rename CRED_USE_KERBEROS valuesAndreas Schneider1-4/+4
2020-09-07auth:gensec: If Kerberos is required, keep schannel for machine account authStefan Metzmacher1-0/+9
2020-09-07auth:gensec: Pass use_kerberos and keep_schannel to gensec_use_kerberos_mechs()Stefan Metzmacher1-12/+14
2020-09-07auth:gensec: Make gensec_use_kerberos_mechs() a static functionStefan Metzmacher2-6/+4
2020-09-07auth:gensec: Add gensec_security_sasl_names()Stefan Metzmacher2-0/+89
2020-08-28lib/util: remove extra safe_string.h fileMatthew DeVore1-0/+2
2020-08-17gensec: Fix a typoVolker Lendecke1-1/+1
2020-05-04CVE-2020-10704: lib util asn1: Add ASN.1 max tree depthGary Lockyer1-1/+1
2020-03-19gensec: Add a check if a gensec module implements weak cryptoAndreas Schneider2-1/+13
2020-02-10auth/gensec: map NT_STATUS_{INVALID_ACCOUNT_NAME,NO_SUCH_DOMAIN} to NT_STATUS...Stefan Metzmacher1-2/+37
2020-02-10gensec/spnego: fallback on INVALID_{ACCOUNT,COMPUTER}_NAME and NO_SUCH_DOMAINStefan Metzmacher1-0/+3
2019-10-12spnego: fix server handling of no optimistic exchangeIsaac Boukris1-0/+13
2019-10-12spnego: add client option to omit sending an optimistic tokenIsaac Boukris1-0/+11
2019-10-12spnego: ignore server mech_types listIsaac Boukris1-5/+26
2019-10-07auth/gensec: fix AES schannel seal and unsealGünther Deschner1-17/+30
2019-10-07auth/gensec: fix non-AES schannel sealGünther Deschner1-0/+9