summaryrefslogtreecommitdiffstats
path: root/src/plugins
Commit message (Expand)AuthorAgeFilesLines
* Treat LDAP KrbKey salt field as optionalGreg Hudson2014-06-051-2/+4
* Always include salt in LDAP KrbKey encodingGreg Hudson2014-06-051-1/+20
* Use k5_setmsgGreg Hudson2014-06-0513-129/+101
* Remove stub pkinit_mapping_file codeGreg Hudson2014-06-033-7/+0
* Properly handle PKCS11 label in PKINITGreg Hudson2014-05-241-10/+18
* Don't blindly use PKCS11 slot IDs in PKINITGreg Hudson2014-05-241-14/+13
* Use case insensitive DNS SAN matching in PKINITTomas Kuthan2014-05-191-1/+1
* Fix invalid JSON handling in KDC OTP moduleGreg Hudson2014-05-191-0/+2
* In PKINIT, use library initializer for OpenSSLTomas Kuthan2014-04-151-15/+10
* Use anonymous OIDs in pkinit_crypto_openssl.cGreg Hudson2014-03-251-53/+43
* Stop shadowing id-pkcs7-data OIDGreg Hudson2014-03-252-72/+45
* Improve PKINIT client memory managementGreg Hudson2014-03-183-103/+54
* Fix unlikely double free in PKINIT client codeGreg Hudson2014-03-181-2/+1
* Conditionalize use of LDAP_OPT_DEBUG_LEVELGreg Hudson2014-02-281-0/+2
* Assume <stdint.h> and fixed-width typesGreg Hudson2014-02-261-6/+0
* Use system dictionary for db2 tests againGreg Hudson2014-02-191-4/+13
* Use TAILQ macros instead of CIRCLEQ in libdb2Greg Hudson2014-02-192-27/+24
* Don't use system dictionary files for DB2 testsGreg Hudson2014-02-111-8/+0
* Move OTP sockets to KDC_RUN_DIRNathaniel McCallum2014-02-061-1/+1
* Remove mentions of krb5-send-prTom Yu2014-01-151-2/+1
* make dependTom Yu2013-12-104-34/+36
* Improve LDAP KDB initialization error messagesGreg Hudson2013-10-301-7/+7
* Use protocol error for PKINIT cert expiryGreg Hudson2013-10-171-1/+1
* Fix audit test module initializationGreg Hudson2013-10-051-2/+1
* KDC Audit infrastructure and plugin implementationZhanna Tsitkov2013-10-0414-0/+1702
* Use constant-time comparisons for checksumsGreg Hudson2013-10-032-5/+5
* Add hostrealm interface testsGreg Hudson2013-08-154-0/+234
* Don't ask empty responder questions in PKINITNalin Dahyabhai2013-07-221-0/+7
* Add the error to some PKINIT NSS debug messagesNalin Dahyabhai2013-07-171-10/+14
* Support PKINIT OpenSSL deferred identity promptingNalin Dahyabhai2013-07-171-55/+159
* Support PKINIT NSS deferred identity promptingNalin Dahyabhai2013-07-171-60/+252
* Pass PKINIT identity prompts to the responder cbNalin Dahyabhai2013-07-172-19/+218
* Make the PKINIT NSS path also check for NULL certsNalin Dahyabhai2013-07-171-1/+6
* Use PKCS11_MODNAME for NSS PKINIT by defaultNalin Dahyabhai2013-07-171-0/+7
* Add support for PKINIT deferring identity promptsNalin Dahyabhai2013-07-176-0/+226
* Split pkinit_identity_initialize into two phasesNalin Dahyabhai2013-07-177-15/+97
* Fix OTP KDC module get_string error handlingGreg Hudson2013-07-171-2/+4
* Avoid allocating zero key_data structuresGreg Hudson2013-07-151-1/+2
* Fix a leak when parsing PKINIT cert SANs with NSSNalin Dahyabhai2013-07-151-0/+1
* Don't leak PKINIT CMS signed data certs and CRLsNalin Dahyabhai2013-07-151-2/+4
* Don't leak the reply key's memory during PKINITNalin Dahyabhai2013-07-151-1/+3
* Use k5calloc instead of k5alloc where appropriateGreg Hudson2013-07-113-12/+14
* Add server-side otp preauth pluginNathaniel McCallum2013-07-116-0/+1145
* Fix uninitialized variable bugsGreg Hudson2013-06-271-0/+1
* Add tests for pwqual modules and plugin orderingGreg Hudson2013-06-274-0/+260
* Fix various warningsGreg Hudson2013-06-0711-53/+46
* Fix warnings in dbtest.cGilles Espinasse2013-05-311-20/+38
* Link dbtest with libkrb5supportGreg Hudson2013-05-311-2/+2
* Reduce boilerplate in makefilesGreg Hudson2013-05-1617-182/+4
* Assume mutex locking cannot failGreg Hudson2013-05-144-31/+13