summaryrefslogtreecommitdiffstats
path: root/daemons/ipa-kdb/ipa_kdb_mspac.c
Commit message (Expand)AuthorAgeFilesLines
* client referral support for trusted domain principals4-2-trust-fixesAlexander Bokovoy2015-09-031-0/+60
* ipa-kdb: make string_to_sid() and dom_sid_string() more robustSumit Bose2015-07-081-1/+10
* ipa-kdb: add unit-test for filter_logon_info()Sumit Bose2015-07-081-32/+9
* ipa-kdb: filter out group membership from MS-PAC for exact SID matches tooAlexander Bokovoy2015-07-081-1/+99
* ipa-kdb: use proper memory chunk size when moving sidsAlexander Bokovoy2015-07-081-3/+17
* ipa-kdb: reject principals from disabled domains as a KDC policyAlexander Bokovoy2015-02-161-1/+1
* ipa-kdb: when processing transitions, hand over unknown ones to KDCAlexander Bokovoy2015-02-161-1/+2
* always get PAC for client principal if AS_REQ is trueMartin Babinsky2015-01-301-1/+1
* ipa-kdb: unexpected error code in 'ipa_kdb_audit_as_req' triggers a messageMartin Babinsky2015-01-301-3/+0
* Fix unchecked return value in ipa-kdbJan Cholasta2014-11-251-1/+1
* Fix possible NULL dereference in ipa-kdbJan Cholasta2014-11-051-3/+5
* Periodically refresh global ipa-kdb configurationNathaniel McCallum2014-06-191-2/+8
* Avoid passing non-terminated string to is_master_hostMartin Kosek2014-03-111-1/+2
* ipa-kdb: do not fetch client principal if it is the same as existing entryAlexander Bokovoy2014-03-061-6/+13
* fix filtering of subdomain-based trust usersAlexander Bokovoy2014-03-051-9/+32
* ipa-kdb: make sure we don't produce MS-PAC in case of authdata flag cleared b...Alexander Bokovoy2014-02-261-0/+8
* ipa-kdb: in case of delegation use original client's database entry, not the ...Alexander Bokovoy2014-02-261-2/+7
* ipa-kdb: Handle parent-child relationship for subdomainsAlexander Bokovoy2013-10-041-10/+99
* KDC: implement transition check for trusted domainsAlexander Bokovoy2013-10-041-0/+63
* Add Delegation Info to MS-PACSimo Sorce2013-09-131-2/+160
* kdb-mspac: Fix out of bounds memsetSimo Sorce2013-08-281-1/+1
* IPA KDB MS-PAC: remove unused variableJakub Hrozek2013-07-231-1/+0
* IPA KDB MS-PAC: return ENOMEM if allocation failsJakub Hrozek2013-07-231-0/+1
* ipa-kdb: reinit mspac on HTTP TGT acquisition to aid trust-add caseAlexander Bokovoy2013-07-231-3/+26
* ipa-kdb: cache KDC hostname on startupAlexander Bokovoy2013-07-231-6/+3
* Generate syntethic MS-PAC for all services running on IPA masterAlexander Bokovoy2013-07-111-6/+73
* Add PAC to master host TGTsSumit Bose2013-07-111-39/+115
* ipa-kdb: add PAC only if requestedSumit Bose2013-03-081-2/+140
* Revert "MS-PAC: Special case NFS services"Sumit Bose2013-03-081-35/+1
* ipa-kdb: Dereference after null check in ipa_kdb_mspac.cSumit Bose2013-02-281-1/+1
* ipa-kdb: Uninitialized scalar variable in ipadb_reinit_mspac()Sumit Bose2013-02-281-5/+4
* ipa-kdb: remove memory leaksMartin Kosek2013-02-141-0/+8
* ipa-kdb: read SID blacklist from LDAPMartin Kosek2013-02-121-54/+102
* ipa-kdb: reinitialize LDAP configuration for known realmsMartin Kosek2013-02-121-12/+45
* ipa-kdb: avoid ENOMEM when all SIDs are filtered outMartin Kosek2013-02-121-4/+14
* ipa-kdb: Support Windows 2012 ServerAlexander Bokovoy2012-12-071-15/+253
* Lookup the user SID in external group as wellSumit Bose2012-11-301-5/+14
* MS-PAC: Special case NFS servicesSimo Sorce2012-11-301-1/+35
* ipadb: reload trust information if domain is not knownSumit Bose2012-10-091-1/+39
* Add PAC filteringSimo Sorce2012-08-021-8/+100
* Split out manipulation of logon_info blobSimo Sorce2012-08-021-40/+69
* Properly name function to add ipa external groupsSimo Sorce2012-08-021-35/+39
* Load list of trusted domain on connecting to ldapSimo Sorce2012-08-021-6/+104
* Move mspac structure to be a private pointerSimo Sorce2012-08-021-18/+31
* Fix typoSumit Bose2012-07-091-1/+1
* Filter groups in the PACSumit Bose2012-06-281-1/+452
* ipa-kdb: Add MS-PAC on constrained delegation.Simo Sorce2012-06-071-22/+26
* Fix setting domain_sidSimo Sorce2012-05-291-1/+1
* Fix MS-PAC checks when using s4u2proxySimo Sorce2012-04-031-4/+6
* Remove compat definesSimo Sorce2012-02-161-32/+0
generated by cgit (git 2.34.1) at 2024-04-27 01:14:40 +0000