summaryrefslogtreecommitdiffstats
path: root/source4/heimdal/kdc
Commit message (Expand)AuthorAgeFilesLines
* heimdal: Only indicate successful authentication after successful authzAndrew Bartlett2014-04-021-4/+4
* heimdal: Match windows and return KRB5KDC_ERR_CLIENT_REVOKED when the account...Andrew Bartlett2014-04-021-1/+1
* heimdal: Do not attempt password authentication for locked out accountsAndrew Bartlett2014-04-021-0/+8
* heimdal: remove checking of KDC PAC signature, delegate to wdc pluginAndrew Bartlett2012-01-121-12/+2
* heimdal: handle referrals for 3 part DRSUAPI SPNsAndrew Tridgell2011-10-041-1/+18
* heimdal: Try to handle the PAC checking when we are in a cross-realm environmentAndrew Bartlett2011-09-051-1/+10
* s4:heimdal: import lorikeet-heimdal-201107241840 (commit 0fdf11fa3cdb47df9f53...Stefan Metzmacher2011-07-265-8/+12
* s4:heimdal: import lorikeet-heimdal-201107150856 (commit 48936803fae4a2fb362c...Stefan Metzmacher2011-07-1512-360/+414
* s4:kdc: generate the S4U_DELEGATION_INFO in the regenerated pacStefan Metzmacher2011-06-281-4/+2
* HEIMDAL:kdc: pass down the delegated_proxy_principal to the verify_pac()Stefan Metzmacher2011-06-283-20/+41
* HEIMDAL:kdc/windc_plugin.h: KRB5_WINDC_PLUGIN_MINOR 4 => 5Stefan Metzmacher2011-06-281-2/+2
* HEIMDAL:kdc: don't allow self delegation if a backend check_constrained_deleg...Stefan Metzmacher2011-06-241-4/+4
* HEIMDAL:kdc: pass down the server hdb_entry_ex to check_constrained_delegation()Stefan Metzmacher2011-06-241-5/+19
* HEIMDAL:kdc: use the correct client realm in the EncTicketPartStefan Metzmacher2011-06-241-1/+1
* HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy caseStefan Metzmacher2011-05-181-13/+38
* HEIMDAL:kdc: pass the correct principal name for the resulting service ticketStefan Metzmacher2011-05-181-38/+36
* HEIMDAL:kdc: let check_PAC() to verify the incoming server and krbtgt cheksumsStefan Metzmacher2011-05-181-4/+7
* Merge new lorikeet heimdal, revision 85ed7247f515770c73b1f1ced1739f6ce19d75d2Jelmer Vernooij2011-03-142-3/+4
* HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_requ...Stefan Metzmacher2011-03-041-0/+5
* heimdal Pass F_CANON down to the hdb layer for servers in AS-REP as wellAndrew Bartlett2011-02-171-2/+1
* s4:heimdal: import lorikeet-heimdal-201101310455 (commit aa88eb1a05c4985cc23f...Andrew Bartlett2011-02-021-0/+4
* heimdal_build: Add version-script for kdc.Jelmer Vernooij2010-12-171-0/+21
* s4:heimdal: import lorikeet-heimdal-201012010201 (commit 81fe27bcc0148d410ca4...Andrew Bartlett2010-12-014-1049/+7
* heimdal Build ticket with the canonical server nameAndrew Bartlett2010-11-161-1/+1
* heimdal Fetch the client before the PAC check, but after obtaining krbtgt_outAndrew Bartlett2010-11-151-31/+30
* s4:heimdal - fix the return code of a non-void functionMatthias Dieter Wallnöfer2010-11-151-0/+2
* heimdal Fix handling of backwards cross-realm detection for Samba4Andrew Bartlett2010-11-151-18/+48
* s4:heimdal: import lorikeet-heimdal-201011102149 (commit 5734d03c20e104c8f455...Andrew Bartlett2010-11-151-19/+25
* heimdal Return HDB_ERR_NOT_FOUND_HERE to the callerAndrew Bartlett2010-11-123-11/+34
* s4:heimdal: import lorikeet-heimdal-201010022046 (commit 1bea031b9404b14114b0...Andrew Bartlett2010-10-034-18/+28
* s4:heimdal: import lorikeet-heimdal-201009250123 (commit 42cabfb5b683dbcb97d5...Matthieu Patou2010-10-035-28/+43
* heimdal use returned server entry from HDB to compare realmsAndrew Bartlett2010-10-021-1/+1
* heimdal Add support for extracting a particular KVNO from the databaseAndrew Bartlett2010-09-295-17/+51
* s4:heimdal Create a new PAC when impersonating a user with S4U2SelfAndrew Bartlett2010-04-101-4/+46
* s4:heimdal Add hooks to check with the DB before we allow s4u2selfAndrew Bartlett2010-04-101-4/+36
* s4:heimdal: import lorikeet-heimdal-201003262338 (commit f4e0dc17709829235f05...Andrew Bartlett2010-03-279-16/+11
* s4:heimdal: import lorikeet-heimdal-201001120029 (commit a5e675fed7c5db8a7370...Andrew Bartlett2010-03-279-166/+197
* heimdal Fix invalid format stringAndrew Bartlett2009-11-241-1/+1
* s4:heimdal: import lorikeet-heimdal-200911122202 (commit 9291fd2d101f3eecec55...Andrew Bartlett2009-11-137-149/+207
* s4:heimdal: import lorikeet-heimdal-200909210500 (commit 290db8d23647a27c39b9...Andrew Bartlett2009-11-134-98/+145
* heimdal kerberos - fix memory leak (free the plugin list always - not only in...Matthias Dieter Wallnöfer2009-10-031-1/+1
* s4:heimdal: import lorikeet-heimdal-200908050050 (commit 8714779fa7376fd9f776...Andrew Bartlett2009-08-054-20/+25
* s4:kerberos Add support for user principal names in certificatesAndrew Bartlett2009-07-282-18/+21
* s4:heimdal: import lorikeet-heimdal-200907162216 (commit d09910d6803aad96b52e...Andrew Bartlett2009-07-171-17/+22
* s4:heimdal: import lorikeet-heimdal-200907152325 (commit 2bef9cd5378c01e9c2a7...Andrew Bartlett2009-07-163-25/+59
* s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookupsAndrew Bartlett2009-06-302-22/+28
* s4:kdc Allow a password change when the password is expiredAndrew Bartlett2009-06-186-27/+35
* s4:heimdal: import lorikeet-heimdal-200906080040 (commit 904d0124b46eed7a8ad6...Andrew Bartlett2009-06-1213-1725/+1108
* Re-add support for supporting the PAC over domain trusts.Andrew Bartlett2008-11-041-19/+17
* s4: import lorikeet-heimdal-200810271034Stefan Metzmacher2008-10-2818-951/+951