summaryrefslogtreecommitdiffstats
path: root/src/providers/krb5
Commit message (Expand)AuthorAgeFilesLines
* KRB5: Authenticate users in a non-POSIX domain using a MEMORY ccacheJakub Hrozek2017-03-306-22/+99
* krb5: return to responder that pkinit is not availableSumit Bose2017-03-291-4/+13
* KRB5: allow pkinit pre-authenticationSumit Bose2017-02-233-13/+297
* pam: enhance Smartcard authentication tokenSumit Bose2017-02-232-1/+5
* Suppres implicit-fallthrough from gcc 7Lukas Slebodnik2017-02-011-0/+1
* KRB5: Advise the user to inspect the krb5_child.log if the child fails with a...Jakub Hrozek2017-01-121-0/+3
* krb5: fix two memory leaksSumit Bose2016-11-281-7/+2
* krb5: Use command line arguments instead env vars for krb5_childSumit Bose2016-11-287-131/+276
* KRB5: Remove spurious warning in logsLukas Slebodnik2016-11-221-1/+1
* KRB5: Fixing FQ name of user in krb5_setup()Petr Čech2016-09-224-3/+36
* Remove double semicolon at the end of lineLukas Slebodnik2016-09-211-1/+1
* KRB5: Return ERR_NETWORK_IO on clock skewJakub Hrozek2016-09-131-0/+2
* KRB5: Send the output username, not internal fqname to krb5_childJakub Hrozek2016-09-084-11/+30
* PAM/KRB5: optional otp and password promptingSumit Bose2016-07-071-3/+82
* KRB5: Use shortname when expanding the user template in Kerberos ccacheJakub Hrozek2016-07-071-4/+4
* KRB5: Rely on sysdb names for the renewal taskJakub Hrozek2016-07-071-18/+6
* KRB5: Rely on internal fqname when constructing UPNsJakub Hrozek2016-07-071-10/+9
* DP: Switch to new interfacePavel Březina2016-06-204-212/+241
* Rename dp_backend.h to backend.hPavel Březina2016-06-204-4/+4
* Remove braces from DEBUG statementsPavel Březina2016-06-181-1/+1
* Do not leak fds in case of failures setting up a child processJakub Hrozek2016-05-311-20/+22
* UTIL: exit() the forked process if exec()-ing a child process failsJakub Hrozek2016-05-191-9/+7
* krb5_auth_store_creds: silence spurious debug messageSumit Bose2016-04-191-1/+5
* Fix typos reported by lintianLukas Slebodnik2016-02-231-1/+1
* krb5_child: Warn if user cannot read krb5.confLukas Slebodnik2016-02-191-0/+24
* UTIL: allow to skip default options for child processesSumit Bose2016-01-191-1/+1
* Krb5/PAM: Fix account lockout error handlingSimo Sorce2016-01-142-0/+9
* KRB5: Adding DNS SRV lookup for krb5 providerPetr Cech2016-01-141-0/+7
* KRB5_CHILD: Debug logs for PAC timeoutPetr Cech2015-12-141-0/+3
* KRB5: Mark globals in krb5_opts.h as externPavel Březina2015-12-142-23/+48
* KRB5: Handle KRB5_REALM_UNKNOWN as ERR_NETWORK_IOJakub Hrozek2015-12-071-0/+1
* KRB5: Handle preauth request timeout more gracefullyJakub Hrozek2015-12-071-0/+5
* KRB5_CHILD: More restrictive umaskPetr Cech2015-11-051-1/+1
* FO: Use refcount to keep track of servers returned to callersJakub Hrozek2015-10-231-2/+2
* REFACTOR: umask(077) --> umask(SSS_DFL_X_UMASK)Petr Cech2015-10-141-1/+1
* KRB5: Offline operation with disabled domainJakub Hrozek2015-09-211-1/+11
* sssd: incorrect checks on length values during packet decodingMichal Židek2015-08-312-8/+8
* KRB5: Use sss_unique_file when creating kdcinfo filesJakub Hrozek2015-08-171-7/+9
* KRB5: Use sss_unique file in krb5_childJakub Hrozek2015-08-171-16/+11
* krb5: assume online state if KDC proxy is configuredSumit Bose2015-08-051-0/+6
* krb5: do not create kdcinfo file if proxy configuration existsSumit Bose2015-08-051-0/+7
* KRB5: Do not try to remove missing ccacheLukas Slebodnik2015-08-051-0/+5
* krb5: do not send SSS_OTP if two factors were usedSumit Bose2015-07-291-1/+6
* KRB5: Use the right domain for case-sensitive flagJakub Hrozek2015-07-221-1/+1
* KRB5: Return right data provider error codeLukas Slebodnik2015-07-151-1/+1
* KRB5: Add and use krb5_auth_queue_send to queue requests by defaultJakub Hrozek2015-07-065-48/+199
* krb: remove duplicit decl. of write_krb5info_filePavel Reichl2015-06-051-3/+0
* krb5: new option krb5_map_userPavel Reichl2015-05-288-15/+213
* krb5: remove field run_as_userPavel Reichl2015-05-142-15/+0
* krb5: try delayed online authentication only for single factor authSumit Bose2015-05-081-0/+7