summaryrefslogtreecommitdiff
path: root/source4/heimdal/kdc
AgeCommit message (Expand)AuthorFilesLines
2015-07-08heimdal:kdc: add support for HDB_ERR_WRONG_REALMStefan Metzmacher3-1/+58
2015-07-08heimdal:kdc: generic support for 3part servicePrincipalNamesStefan Metzmacher1-3/+2
2015-03-12heimdal:kdc: remove KRB5_PADATA_CLIENT_CANONICALIZED handlingStefan Metzmacher1-52/+0
2015-01-23heimdal: Ensure that HDB_ERR_NOT_FOUND_HERE, critical for the RODC, is not ov...Andrew Bartlett1-4/+19
2015-01-23heimdal: Really bug in KDC handling of enterprise princsNicolas Williams1-3/+2
2015-01-23heimdal: Fix bug in KDC handling of enterprise principalsNicolas Williams1-35/+38
2014-04-02heimdal: Only indicate successful authentication after successful authzAndrew Bartlett1-4/+4
2014-04-02heimdal: Match windows and return KRB5KDC_ERR_CLIENT_REVOKED when the account...Andrew Bartlett1-1/+1
2014-04-02heimdal: Do not attempt password authentication for locked out accountsAndrew Bartlett1-0/+8
2012-01-12heimdal: remove checking of KDC PAC signature, delegate to wdc pluginAndrew Bartlett1-12/+2
2011-10-04heimdal: handle referrals for 3 part DRSUAPI SPNsAndrew Tridgell1-1/+18
2011-09-05heimdal: Try to handle the PAC checking when we are in a cross-realm environmentAndrew Bartlett1-1/+10
2011-07-26s4:heimdal: import lorikeet-heimdal-201107241840 (commit 0fdf11fa3cdb47df9f53...Stefan Metzmacher5-8/+12
2011-07-15s4:heimdal: import lorikeet-heimdal-201107150856 (commit 48936803fae4a2fb362c...Stefan Metzmacher12-360/+414
2011-06-28s4:kdc: generate the S4U_DELEGATION_INFO in the regenerated pacStefan Metzmacher1-4/+2
2011-06-28HEIMDAL:kdc: pass down the delegated_proxy_principal to the verify_pac()Stefan Metzmacher3-20/+41
2011-06-28HEIMDAL:kdc/windc_plugin.h: KRB5_WINDC_PLUGIN_MINOR 4 => 5Stefan Metzmacher1-2/+2
2011-06-24HEIMDAL:kdc: don't allow self delegation if a backend check_constrained_deleg...Stefan Metzmacher1-4/+4
2011-06-24HEIMDAL:kdc: pass down the server hdb_entry_ex to check_constrained_delegation()Stefan Metzmacher1-5/+19
2011-06-24HEIMDAL:kdc: use the correct client realm in the EncTicketPartStefan Metzmacher1-1/+1
2011-05-18HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy caseStefan Metzmacher1-13/+38
2011-05-18HEIMDAL:kdc: pass the correct principal name for the resulting service ticketStefan Metzmacher1-38/+36
2011-05-18HEIMDAL:kdc: let check_PAC() to verify the incoming server and krbtgt cheksumsStefan Metzmacher1-4/+7
2011-03-14Merge new lorikeet heimdal, revision 85ed7247f515770c73b1f1ced1739f6ce19d75d2Jelmer Vernooij2-3/+4
2011-03-04HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_requ...Stefan Metzmacher1-0/+5
2011-02-17heimdal Pass F_CANON down to the hdb layer for servers in AS-REP as wellAndrew Bartlett1-2/+1
2011-02-02s4:heimdal: import lorikeet-heimdal-201101310455 (commit aa88eb1a05c4985cc23f...Andrew Bartlett1-0/+4
2010-12-17heimdal_build: Add version-script for kdc.Jelmer Vernooij1-0/+21
2010-12-01s4:heimdal: import lorikeet-heimdal-201012010201 (commit 81fe27bcc0148d410ca4...Andrew Bartlett4-1049/+7
2010-11-16heimdal Build ticket with the canonical server nameAndrew Bartlett1-1/+1
2010-11-15heimdal Fetch the client before the PAC check, but after obtaining krbtgt_outAndrew Bartlett1-31/+30
2010-11-15s4:heimdal - fix the return code of a non-void functionMatthias Dieter Wallnöfer1-0/+2
2010-11-15heimdal Fix handling of backwards cross-realm detection for Samba4Andrew Bartlett1-18/+48
2010-11-15s4:heimdal: import lorikeet-heimdal-201011102149 (commit 5734d03c20e104c8f455...Andrew Bartlett1-19/+25
2010-11-12heimdal Return HDB_ERR_NOT_FOUND_HERE to the callerAndrew Bartlett3-11/+34
2010-10-03s4:heimdal: import lorikeet-heimdal-201010022046 (commit 1bea031b9404b14114b0...Andrew Bartlett4-18/+28
2010-10-03s4:heimdal: import lorikeet-heimdal-201009250123 (commit 42cabfb5b683dbcb97d5...Matthieu Patou5-28/+43
2010-10-02heimdal use returned server entry from HDB to compare realmsAndrew Bartlett1-1/+1
2010-09-29heimdal Add support for extracting a particular KVNO from the databaseAndrew Bartlett5-17/+51
2010-04-10s4:heimdal Create a new PAC when impersonating a user with S4U2SelfAndrew Bartlett1-4/+46
2010-04-10s4:heimdal Add hooks to check with the DB before we allow s4u2selfAndrew Bartlett1-4/+36
2010-03-27s4:heimdal: import lorikeet-heimdal-201003262338 (commit f4e0dc17709829235f05...Andrew Bartlett9-16/+11
2010-03-27s4:heimdal: import lorikeet-heimdal-201001120029 (commit a5e675fed7c5db8a7370...Andrew Bartlett9-166/+197
2009-11-24heimdal Fix invalid format stringAndrew Bartlett1-1/+1
2009-11-13s4:heimdal: import lorikeet-heimdal-200911122202 (commit 9291fd2d101f3eecec55...Andrew Bartlett7-149/+207
2009-11-13s4:heimdal: import lorikeet-heimdal-200909210500 (commit 290db8d23647a27c39b9...Andrew Bartlett4-98/+145
2009-10-03heimdal kerberos - fix memory leak (free the plugin list always - not only in...Matthias Dieter Wallnöfer1-1/+1
2009-08-05s4:heimdal: import lorikeet-heimdal-200908050050 (commit 8714779fa7376fd9f776...Andrew Bartlett4-20/+25
2009-07-28s4:kerberos Add support for user principal names in certificatesAndrew Bartlett2-18/+21
2009-07-17s4:heimdal: import lorikeet-heimdal-200907162216 (commit d09910d6803aad96b52e...Andrew Bartlett1-17/+22