krb5.git - MIT Kerberos patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	Get rid of adm.h	Greg Hudson	2013-01-10	1	-225/+0
\| \| \| \| \| \|	adm.h predates the ovsec kadm5 integration. It contains a bunch of obsolete defines and a redundant definition of krb5_realm_params. Get rid of it, and include <kadm5/admin.h> where we currently include it.
*	Add control over session key enctype negotiation	Nicolas Williams	2012-06-06	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Adds a principal string attribute named "session_enctypes" which can specify what enctypes the principal supports for session keys. (For what it's worth, this actually allows one to list des-cbc-md5 as a supported session key enctype, though obviously this hardly matters now.) Add a [realms] section parameter for specifying whether to assume that principals (which lack the session_enctypes attribute) support des-cbc-crc for session keys. This allows those who still need to use allow_weak_crypto=true, for whatever reason, to start reducing the number of tickets issued with des-cbc-crc session keys to clients which still give des-cbc-crc preference in their default_tgs_enctypes list. [ghudson@mit.edu: Miscellaneous edits, cleanups, and fixes; refactored test script; documented session_enctypes attribute]
*	Adjust most C source files to match the new standards for copyright	Greg Hudson	2011-03-09	1	-3/+2
\| \| \| \| \| \|	and license comments. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24695 dc483132-0cff-0310-8789-dd5450dbe970
*	Implement restrict_anonymous_to_tgt realm flag	Greg Hudson	2010-12-01	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \| \|	Implement a new realm flag to reject ticket requests from anonymous principals to any principal other than the local TGT. Allows FAST to be deployed using anonymous tickets as armor in realms where the set of authenticatable users must be constrained. ticket: 6829 target_version: 1.9 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24547 dc483132-0cff-0310-8789-dd5450dbe970
*	Eliminate the unused realm_dbname field from krb5_realm_params	Greg Hudson	2010-05-04	1	-1/+0
\| \| \| \|	git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23968 dc483132-0cff-0310-8789-dd5450dbe970
*	Reindent include directory, reformatting prototypes as necessary.	Greg Hudson	2009-11-14	1	-137/+138
\| \| \| \| \| \| \|	Exclude include/gssrpc due to its Sun origin and k5-platform.h due to macros too hairy for emacs c-mode to handle. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23180 dc483132-0cff-0310-8789-dd5450dbe970
*	Eliminate the need for the domain_realm mapping table on the client side by ↵	Zhanna Tsitkov	2009-01-23	1	-1/+3
\| \| \| \| \| \|	implementing minimal referral support in the KDC git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21792 dc483132-0cff-0310-8789-dd5450dbe970
*	Don't include kdb.h from k5-int.h; instead, include it in the handful	Ken Raeburn	2006-04-13	1	-0/+3
\| \| \| \| \| \|	of places where it's actually needed. Update dependencies. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17898 dc483132-0cff-0310-8789-dd5450dbe970
*	Instead of arbitrary division of headers into include and include/krb5, with	Ken Raeburn	2006-03-11	1	-0/+217
	include directives sometimes using krb5/foo.h and sometimes using foo.h, and -I options always given for both directories in both source and build trees, push include/krb5/* up a level and drop the krb5 directory (except, for the moment, the change log). Updated #include directives, -I options, and dependencies accordingly, and deleted one or two bits of old, unused code that was noticed in the process. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17730 dc483132-0cff-0310-8789-dd5450dbe970