| Commit message (Expand) | Author | Age | Files | Lines |
* | krb5_get_error_message cannot return NULL, and returns "Success" on | Greg Hudson | 2010-11-01 | 2 | -18/+12 |
* | securID code fixes | Sam Hartman | 2010-10-19 | 1 | -0/+1 |
* | Remove KDC replay cache | Greg Hudson | 2010-10-19 | 6 | -111/+3 |
* | CVE-2010-1322 KDC uninitialized pointer crash in authorization data handling ... | Tom Yu | 2010-10-05 | 1 | -4/+4 |
* | Add an error to be returned by a preauth mechanism indicating that the KDC sh... | Sam Hartman | 2010-10-01 | 2 | -1/+4 |
* | Remove support for the old pa-sam-challenge and pa-sam-response | Sam Hartman | 2010-10-01 | 1 | -725/+0 |
* | Slight revisions to create_workers() in the KDC: | Greg Hudson | 2010-09-19 | 1 | -6/+9 |
* | KDC worker processes feature | Greg Hudson | 2010-09-17 | 4 | -7/+160 |
* | kdb: store mkey list in context and permit NULL mkey for kdb_dbe_decrypt_key_... | Sam Hartman | 2010-09-15 | 5 | -152/+10 |
* | Make depend | Greg Hudson | 2010-09-08 | 1 | -36/+43 |
* | Properly search for MANDATORY-FOR-KDC authdata elements. Reported by | Greg Hudson | 2010-09-02 | 1 | -1/+1 |
* | Fix an account lockout error-handling regression by converting the | Greg Hudson | 2010-08-29 | 1 | -11/+23 |
* | In AS replies, set the key-expiration field to the minimum of account | Greg Hudson | 2010-08-12 | 1 | -1/+12 |
* | Add check_allowed_to_delegate to the DAL with a corresponding libkdb5 | Greg Hudson | 2010-07-15 | 1 | -33/+4 |
* | Add refresh_config to the DAL with a corresponding libkdb5 API, | Greg Hudson | 2010-07-15 | 1 | -3/+1 |
* | Addendum to r24185: make audit_as_req return void, since it's an | Greg Hudson | 2010-07-13 | 1 | -2/+2 |
* | Add audit_as_req to the DAL with a corresponding libkdb5 API, | Greg Hudson | 2010-07-13 | 1 | -27/+2 |
* | Add check_policy_as and check_policy_tgs to the DAL table with | Greg Hudson | 2010-07-13 | 2 | -79/+16 |
* | Add check_transited_realms to the DAL table with a corresponding | Greg Hudson | 2010-07-12 | 1 | -25/+4 |
* | Add sign_authdata to the DAL table with a corresponding libkdb5 API, | Greg Hudson | 2010-07-12 | 3 | -83/+7 |
* | Create a KRB5_KDB_FLAG_ALIAS_OK to control whether plugin modules | Greg Hudson | 2010-07-08 | 2 | -0/+3 |
* | Add a missing break in the parsing of krb5kdc's -P option. Reported | Greg Hudson | 2010-07-07 | 1 | -0/+1 |
* | Remove count parameters from get_principal, put_principal, | Greg Hudson | 2010-07-06 | 5 | -305/+173 |
* | Use KRB5_PLUGIN_OP_NOTSUPP uniformly as the error code for operations | Greg Hudson | 2010-07-03 | 3 | -5/+5 |
* | Remove verify_master_key from the DAL table, as well as its associated | Greg Hudson | 2010-07-02 | 1 | -17/+0 |
* | Rename krb5_dbekd_encrypt_key_data and krb5_dbekd_decrypt_key_data to | Greg Hudson | 2010-07-02 | 4 | -23/+20 |
* | Remove the set_master_key and get_master_key DAL interfaces and their | Greg Hudson | 2010-07-02 | 1 | -5/+0 |
* | make depend | Greg Hudson | 2010-06-07 | 1 | -62/+66 |
* | Don't include nul characters in the text we send with krb-error | Greg Hudson | 2010-05-24 | 2 | -2/+2 |
* | Eliminate the unused realm_dbname field from krb5_realm_params | Greg Hudson | 2010-05-04 | 2 | -3/+0 |
* | memory leak in process_tgs_req in r23724 | Tom Yu | 2010-04-30 | 1 | -1/+3 |
* | Eliminate a non-useful NULL check in the KDC's dispatch() function. | Greg Hudson | 2010-04-22 | 1 | -1/+1 |
* | Fix CVE-2010-1230 (MITKRB5-SA-2010-004) double-free in KDC triggered | Tom Yu | 2010-04-20 | 1 | -0/+2 |
* | Merge users/raeburn/branches/network-merge | Ken Raeburn | 2010-03-17 | 9 | -1829/+177 |
* | handle NT_SRV_INST in service principal referrals | Tom Yu | 2010-03-16 | 1 | -0/+1 |
* | Ignore improperly encoded signedpath AD elements | Greg Hudson | 2010-03-05 | 1 | -1/+5 |
* | The TGS code was not freeing authdata. This is an old leak which was | Greg Hudson | 2010-02-18 | 1 | -2/+3 |
* | MITKRB5-SA-2010-001 CVE-2010-0283 KDC denial of service | Tom Yu | 2010-02-16 | 3 | -1/+8 |
* | Followon fixes to r23712: | Greg Hudson | 2010-02-10 | 5 | -9/+14 |
* | enc_padata can include empty sequence | Sam Hartman | 2010-02-09 | 5 | -84/+61 |
* | Fix cross-realm handling of AD-SIGNEDPATH | Greg Hudson | 2010-02-05 | 3 | -7/+19 |
* | Get rid of kdb_ext.h and allow out-of-tree KDB plugins | Greg Hudson | 2010-01-27 | 2 | -56/+48 |
* | Simplify and fix FAST check for keyed checksum type | Greg Hudson | 2010-01-12 | 1 | -15/+4 |
* | Always treat anonymous as preauth required | Sam Hartman | 2010-01-07 | 1 | -0/+1 |
* | Make preauth_module_dir override, rather than supplement, the | Greg Hudson | 2010-01-07 | 1 | -33/+10 |
* | Add preauth_module_dir support to the KDC preauth module loader | Greg Hudson | 2010-01-04 | 1 | -3/+44 |
* | Ignore some routing messages indicating changes that don't affect our | Ken Raeburn | 2010-01-03 | 1 | -0/+24 |
* | Change db_args from being a global to only defined in the function | Ezra Peisach | 2010-01-01 | 2 | -16/+16 |
* | Add gcc printf attribute for kdc_err prototype | Ezra Peisach | 2010-01-01 | 1 | -1/+5 |
* | Add a new -P option to krb5kdc and kadmind which, if given, specifies | Russ Allbery | 2010-01-01 | 2 | -2/+40 |