summaryrefslogtreecommitdiffstats
path: root/src/kdc/policy.c
Commit message (Collapse)AuthorAgeFilesLines
* Remove irrelevant to current code Novell copyrightZhanna Tsitkov2012-08-101-27/+0
|
* Create e_data as pa_data in KDC interfacesGreg Hudson2011-10-041-2/+2
| | | | | | | | | | | | All current known uses of e_data are encoded as pa-data or typed-data. FAST requires that e_data be expressed as pa-data. Change the DAL and kdcpreauth interfaces so that e_data is returned as a sequence of pa-data elements. Add a preauth module flag to indicate that the sequence should be encoded as typed-data in non-FAST errors. ticket: 6969 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25298 dc483132-0cff-0310-8789-dd5450dbe970
* Adjust most C source files to match the new standards for copyrightGreg Hudson2011-03-091-5/+1
| | | | | | and license comments. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24695 dc483132-0cff-0310-8789-dd5450dbe970
* Add check_policy_as and check_policy_tgs to the DAL table withGreg Hudson2010-07-131-73/+2
| | | | | | | | | | corresponding libkdb5 APIs, replacing the CHECK_POLICY_AS and CHECK_POLICY_TGS methods of db_invoke. ticket: 6749 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24184 dc483132-0cff-0310-8789-dd5450dbe970
* Use KRB5_PLUGIN_OP_NOTSUPP uniformly as the error code for operationsGreg Hudson2010-07-031-2/+2
| | | | | | | | | | not supported by a KDB module. (Previously KRB5_KDB_DBTYPE_NOSUP was used in some cases and KRB5_PLUGIN_OP_NOTSUPP in others.) ticket: 6749 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24170 dc483132-0cff-0310-8789-dd5450dbe970
* make mark-cstyleTom Yu2009-10-311-44/+44
| | | | | | make reindent git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23100 dc483132-0cff-0310-8789-dd5450dbe970
* Heimdal DB bridge plugin for KDC back endGreg Hudson2009-10-271-2/+5
| | | | | | | | | Merge Luke's users/lhoward/heimmig branch to trunk. Implements a KDC back-end plugin which interfaces to a Heimdal HDB plugin. ticket: 6578 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23073 dc483132-0cff-0310-8789-dd5450dbe970
* Merge mskrb-integ onto trunkSam Hartman2009-01-031-5/+96
| | | | | | | | | | | | | | | | | | | | | | | | The mskrb-integ branch includes support for the following projects: Projects/Aliases * Projects/PAC and principal APIs * Projects/AEAD encryption API * Projects/GSSAPI DCE * Projects/RFC 3244 In addition, it includes support for enctype negotiation, and a variety of GSS-API extensions. In the KDC it includes support for protocol transition, constrained delegation and a new authorization data interface. The old authorization data interface is also supported. This commit merges the mskrb-integ branch on to the trunk. Additional review and testing is required. Merge commit 'mskrb-integ' into trunk ticket: new status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21690 dc483132-0cff-0310-8789-dd5450dbe970
* protoizeKen Raeburn2002-09-111-11/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14841 dc483132-0cff-0310-8789-dd5450dbe970
* copyright notice updates from 1.1 branchKen Raeburn1999-09-241-1/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11853 dc483132-0cff-0310-8789-dd5450dbe970
* Add const declarations to make remove warnings about convertingEzra Peisach1995-09-041-2/+2
| | | | | | | a pointer to const string to a non-const type. Make this change consistant throughout the sources. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@6657 dc483132-0cff-0310-8789-dd5450dbe970
* * *.[ch]: Avoid <krb5/...> and <com_err.h> includesJohn Gilmore1995-02-281-7/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5031 dc483132-0cff-0310-8789-dd5450dbe970
* do_tgs_req.c (prepare_error_tgs): Don't free the passed in ticket; itTheodore Tso1994-12-131-0/+8
| | | | | | | | | | | | | | | | | | | | will be freed as part of other structures. do_tgs_req.c (process_tgs_req): Set the encryption type in the reply structure, and set the eblock type accordingly. do_as_req.c (process_as_req): Set the encryption type in the reply_encpart structure. kdc_util.c (validate_as_request): policy.c (against_local_policy_as): Move requirement that an AS request must include the addresses field to the local policy routine. (Not required by RFC). main.c (setup_com_err): Initialize the kdc5 error table (the kdb5 error table is already initialized) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@4730 dc483132-0cff-0310-8789-dd5450dbe970
* stamp out rcs keywordsMark Eichin1994-08-181-6/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@4190 dc483132-0cff-0310-8789-dd5450dbe970
* Change export warning notice from "is assumed to require an export license"Theodore Tso1993-09-011-2/+2
| | | | | | to "may require..." git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2638 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed #ifdef 0 --> #if 0Theodore Tso1993-06-031-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2577 dc483132-0cff-0310-8789-dd5450dbe970
* Massive changes to do_as_req.c, do_tgs_req.c, kdc_util.c, and policy.cTheodore Tso1992-09-301-47/+30
| | | | | | | | | | | | Fixed bug so that renewable/forwardable/proxiable/tickets work on all tickets, not just the TGS server. Fixed bug so that proxiable tickets don't work on TGT tickets. Revamped structure to make things cleaner, and easier to understand. Nearly all of the validation routines have been moved to a validate_as_request and a validate_tgs_request subroutine in kdc_util.c. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2451 dc483132-0cff-0310-8789-dd5450dbe970
* Update copyright noticeJohn Kohl1991-06-061-2/+16
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@2156 dc483132-0cff-0310-8789-dd5450dbe970
* remove reference to obsolete flagsJohn Kohl1990-12-201-1/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1580 dc483132-0cff-0310-8789-dd5450dbe970
* changes for new data structuresJohn Kohl1990-10-101-18/+18
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1231 dc483132-0cff-0310-8789-dd5450dbe970
* fix reference to copyright/distribution provisionsJohn Kohl1990-05-251-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@945 dc483132-0cff-0310-8789-dd5450dbe970
* change isset to isflagsetJohn Kohl1990-02-071-20/+22
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@308 dc483132-0cff-0310-8789-dd5450dbe970
* *** empty log message ***John Kohl1990-01-301-0/+83
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@202 dc483132-0cff-0310-8789-dd5450dbe970