Lines Matching refs:kdc
22 * kdc/connect.c (init_socket): bind to a particular address
49 * kdc/kerberos5.c (as_rep): set keytype to sess_ktype if
65 * kdc/hprop.c (v4_prop): fix bogus indexing
118 * kdc/kerberos5.c: allow mis-match of tgt session key, and service
176 * kdc/connect.c (handle_udp, handle_tcp): correct type of `n'
211 * kdc/kerberos4.c (swap32): conditionalize
246 * kdc/kerberos5.c (check_flags): handle case where client is NULL
248 * kdc/connect.c (process_request): return zero after processing
293 * kdc/kdc_locl.h: proto for `get_des_key'
301 * kdc/hprop.c (v4_prop, ka_convert): convert to a set of keys
303 * kdc/kaserver.c: use `get_des_key'
305 * kdc/524.c: use new crypto api
307 * kdc/kerberos4.c: use new crypto api
309 * kdc/kerberos5.c: always treat keytypes as enctypes; use new
312 * kdc/kstash.c: adapt to new crypto api
314 * kdc/string2key.c: adapt to new crypto api
385 * kdc/kerberos5.c (get_pa_etype_info): initialize `ret'
388 * kdc/connect.c (do_request): check for errors from `sendto'
390 * kdc/524.c (do_524): initialize `ret'
428 * kdc/kerberos5.c (check_tgs_flags): make sure kdc-req-body->rtime
434 kdc-flags to the value specified, and not always to one
438 * kdc/kerberos5.c: Optionally compare client address to addresses
441 * kdc/connect.c: Pass client address to as_rep() and tgs_rep().
443 * kdc/config.c: Add check_ticket_addresses, and
490 * kdc/hprop.c: conditionalize ka-server reading support on
510 * kdc/hprop.c: add support for ka-server databases
530 * kdc/hprop.c (v4_prop): Check for null key.
591 * kdc/hprop.c (v4_prop): Check for `changepw.kerberos'.
598 * kdc/kerberos5.c: Move checking of principal flags to new
622 * kdc/kerberos5.c (tgs_rep2): check for interesting flags on
629 * kdc/kerberos4.c: Return sane error code if krb_rd_req fails.
692 * kdc/hprop-common.c: use krb5_{read,write}_message
778 * kdc/kerberos5.c (get_pa_etype_info): remove gcc-ism of
783 * kdc/524.c: Use krb5_decode_EncTicketPart.
785 * kdc/kerberos5.c: Check at runtime whether to use enctypes
787 and kdc-rep as well as `keytype' for session key. Fix some obvious
833 * kdc/kerberos5.c: If pre-authentication fails, return a list of
847 * kdc/connect.c: Don't fail if realloc(X, 0) returns NULL.
863 * kdc/kerberos5.c: Add some support for using enctypes instead of
930 * kdc/kerberos5.c (tgs_rep): initialize `i'
962 * kdc/kerberos5.c: Process AuthorizationData.
966 * kdc/string2key.c: Use AFS string-to-key from libkrb5.
1012 * kdc/kerberos5.c (tgs_check_authenticator): RFC1510 doesn't say
1054 * kdc/connect.c: Send version 5 TCP-reply as length+data.
1060 * kdc/kaserver.c (create_reply_ticket): use a random nonce in the
1063 * kdc/connect.c (init_sockets): less reallocing.
1208 * kdc/connect.c: Exit if no sockets could be bound.
1283 * kdc/kerberos5.c (encode_reply): return success
1287 * kdc/kerberos5.c (find_etype) Return correct index of selected
1308 * kdc/connect.c: Log bad requests.
1310 * kdc/kerberos5.c: Move stuff that's in common between as_rep and
1313 * kdc/kerberos5.c: Fix user-to-user authentication.
1316 - add a kdc-options argument to krb5_get_credentials, and rename
1345 * kdc/kerberos5.c: Check version number of krbtgt.
1364 * kdc: removed all unsealing, now done by the hdb layer
1396 * kdc/connect.c: check for leading '/' in http request
1449 * kdc/kerberos5.c: fix check for keyed and collision-proof
1461 * kdc/kerberos5.c: Somewhat fix the etype usage. The list sent by
1462 the client is used to select wich key to encrypt the kdc rep with
1467 * kdc/string2key.c: Add keytype support. Default to version 5
1488 * kdc/connect.c: use new addr_families functions
1517 * kdc/hprop.c: Don't encrypt twice. Complain on non-convertable
1539 * kdc/connect.c: support AF_INET6
1550 * kdc/kerberos5.c: Fixes for cross-realm, including (but not
1563 * kdc/string2key.c: Fix password handling.
1574 * kdc/kerberos5.c: increase the arbitrary limit from 1024 to 8192
1599 * kdc/hpropd.c (main): check number of arguments
1605 * kdc/string2key.c (main): check number of arguments
1614 * kdc/main.c (main): use sigaction without SA_RESTART to break out
1617 * kdc/kstash.c: default to HDB_DB_DIR "/m-key"
1619 * kdc/config.c (configure): add `--version'. Check the number of
1634 * kdc/kerberos5.c (set_salt_padata): new function
1646 * kdc/kerberos5.c: Check invalid flag.
1671 * kdc/hprop.c: Add `--decrypt' and `--encrypt' flags.
1675 * kdc/{hprop,hpropd}.c: Add support to dump database to stdout.
1677 * kdc/hprop.c: Don't use same master key as version 4.
1683 * kdc/connect.c: Allow run time port specification.
1685 * kdc/config.c: Add flags for http support, and port
1710 * kdc/hprop.h: Change port to 754.
1712 * kdc/hpropd.c: Verify who tries to transmit a database.
1721 * kdc/connect.c: Add timeout to select, and log about expired tcp
1724 * kdc/config.c: Add `database' option.
1726 * kdc/hpropd.c: Log about duplicate entries.
1735 * kdc/connect.c: Set filedecriptor to -1 on allocated decriptor
1806 * kdc/kstash.8, hprop.8, hpropd.8: new man pages
1833 * kdc/connect.c lib/krb5/send_to_kdc.c: Add http support.
1865 * kdc/kaserver.c: some more checks
1881 * kdc/kaserver.c: fix up memory deallocation
1883 * kdc/kaserver.c: quick hack at talking kaserver protocol
1885 * kdc/kerberos4.c: Make `db-fetch4' global
1889 * kdc/rx.h, kdc/kerberos4.h: new header files
1915 * kdc/kerberos4.c: Check database when converting v4 principals.
1917 * kdc/kerberos5.c: Include kvno in Ticket.
1939 * kdc/kerberos4.c: Fix memory leak in v4 protocol handler.
1992 * kdc/kerberos5.c: Fix for old clients passing 0 for `no endtime'.
2000 * lib/asn1/k5.asn1: Make kdc-req-body.till OPTIONAL
2002 * kdc/524.c: A somewhat working 524-protocol module.
2004 * kdc/kerberos4.c: Add version 4 ticket encoding and encryption
2011 * kdc/kerberos5.c (tgs_check_autenticator): Return error code
2015 * kdc/kerberos5.c (tgs_make_reply): Fix endtime in reply.
2075 * kdc/hprop*.c: Add database propagation programs.
2077 * kdc/connect.c: Max request size.
2148 * kdc/config.c: new variable `kdc_warn_pwexpire'
2171 * kdc/kerberos5.c: include last-req's of type 6 and 7, if
2195 * kdc: Make context global.
2208 * kdc/kerberos5.c: Check the valid times on client and server.
2226 * kdc/kerberos4.c: Add version 4 protocol handler. The requrement
2244 * kdc/kerberos5.c (tgs_rep2): make sure we also have an defined
2249 * kdc/kerberos5.c: Unseal keys from database before use.
2251 * kdc/misc.c: New functions set_master_key, unseal_key and
2264 * kdc/kerberos5.c (as_rep): Use `METHOD-DATA' when sending
2316 * kdc/kerberos5.c: Update to use new db format. Better checking of
2335 * kdc/kerberos5.c: Check `require_enc_timestamp' malloc space for
2359 * kdc/kerberos5.c (as_rep): Try all valid pa-datas before giving
2372 * kdc/string2key.c: Add flags to output version 5 (DES only),
2383 * kdc/misc.c: check result of hdb_open
2396 * kdc/kerberos5.c: Rewritten flags parsing, it now might work to
2402 function get_kdc_cred, that always contacts the kdc and doesn't
2428 * kdc/main.c: Add -p flag to disable pa-enc-timestamp requirement.
2432 * kdc/kerberos5.c (tgs_rep2): Free ticket and ap_req.
2449 * kdc/kerberos5.c: Split tgs_rep in smaller functions. Add better
2452 * kdc/log.c: Some simple logging facilities.
2454 * kdc/misc.c (db_fetch): Take a krb5_principal.
2456 * kdc/connect.c: Pass address of request to as_rep and
2486 * lib/krb5/krbhst.c (krb5_get_krbhst): Get all kdc's and try also
2489 * kdc/kerberos5.c, lib/krb5/rd_priv.c, lib/krb5/rd_safe.c: use
2534 * kdc/kerberos5.c (tgs_rep): support keyed checksums
2550 * kdc/connect.c: Check filedescriptor in select.
2552 * kdc/kerberos5.c: Remove most of the most common memory leaks.
2567 * kdc/kerberos5.c: check if the pre-auth was decrypted properly.
2675 * kdc/kerberos5.c: Check authenticator. Use more general etype
2816 * kdc/kerberos5.c: Fix PA-ENC-TS-ENC
2818 * kdc/connect.c(process_request): Set `new'
2836 * kdc/kdc.c: more support for ENC-TS-ENC
2866 * kdc/kdc.c: preliminary PREAUTH_ENC_TIMESTAMP
2908 * kdc/kdc.c: Use new copying functions, and free some data.
2977 * kdc/dump.c: Database dump program.
2979 * kdc/ank.c: Trivial database editing program.
2981 * kdc/{kdc.c, load.c}: Use libhdb.
2989 * kdc/kdc.c: Rewritten AS, and somewhat more working TGS support.
3028 * kdc/kdc.c: Some kind of non-working TGS support.
3077 * kdc: The beginnings of a kdc.