Timothy Pearson
ca4c872008
Properly report certificate retrieval failures to calling application
9 years ago
Timothy Pearson
f1b7b0381a
Remove any chance of passwords persisting in deallocated main memory after application termination
9 years ago
Timothy Pearson
e1d85d3d83
Use correct permissive flag
9 years ago
Timothy Pearson
2752bfb1d0
Fix FTBFS on ancient Heimdal versions
9 years ago
Timothy Pearson
56c2b5fc9b
Add deactivated krb5 PKCS login line
9 years ago
Timothy Pearson
7ebf958b10
Write out remaining appdefaults entries on client
9 years ago
Timothy Pearson
53a442c926
Allow Kerberos ticket init via cryptographic card
9 years ago
Timothy Pearson
80c65755dc
Write missing appdefaults section on client machines
9 years ago
Timothy Pearson
d9172dad3c
Add PKI subject mapping to user principals
...
Fix long-standing inability to clear user principal attribute fields
9 years ago
Timothy Pearson
c70ce69a08
Convert the last methods using the kadmin utility to the Heimdal C API
9 years ago
Timothy Pearson
11869fce63
Move keytab export to native Heimdal API
9 years ago
Timothy Pearson
e085706825
Convert service add to C API
9 years ago
Timothy Pearson
5ae128fb8b
Remove dead code from prior commit
9 years ago
Timothy Pearson
0fbc17ac57
Convert machine add to kadmin API
9 years ago
Timothy Pearson
3d6055df7b
Fix local kadmin access
9 years ago
Timothy Pearson
bd30e6c655
Start to move away from using the kadmin binary to using the kadmin client API
9 years ago
Timothy Pearson
a619f64455
Fix a few minor issues with PKI certificate generation
9 years ago
Timothy Pearson
6cddf7dd1c
Minor fixup to cert generation code
9 years ago
Timothy Pearson
07d094fd32
Extend PKCS certificate generation routines
...
This breaks the ABI
9 years ago
Timothy Pearson
c6eab472be
Add PKCS methods
9 years ago
Timothy Pearson
30b251b05b
Clean up revoked certificates when done updating CRL
9 years ago
Timothy Pearson
ba7bc5afac
Fix up certificate expiry detection
9 years ago
Timothy Pearson
c714661bc9
Add certificate store attribute access method
9 years ago
Timothy Pearson
521c4ed590
Add additional CRL manipulation methods
9 years ago
Timothy Pearson
0fce8b42b6
Store CRL expiry in LDAP
9 years ago
Timothy Pearson
efb81441de
Add CRL generation
9 years ago
Timothy Pearson
a97c0c3d54
Implement several methods required for PKI certificate management
9 years ago
Timothy Pearson
54d8d2580c
Extend user key and certificate generation methods
9 years ago
Timothy Pearson
0a81ad9d6e
Fix CN/DN ordering
9 years ago
Timothy Pearson
bc95fa92b0
Properly set CRL URL and fix up a few other glitches
9 years ago
Timothy Pearson
f0eeda5dc8
Allow CRL URL to be set via configuration file
9 years ago
Timothy Pearson
6df22c8ca2
Fix up Kerberos PKI certificate generation
9 years ago
Timothy Pearson
d6f004658d
Allow certificate expiry to be set
9 years ago
Timothy Pearson
f4afc1290d
Extend CA expiry to 1 year
9 years ago
Timothy Pearson
8b16aef38d
Fix incorrect login causing PAM fatal error message
9 years ago
Slávek Banko
f276c65480
Reset submodule main/libraries/libtdeldap/cmake to latest HEAD
10 years ago
Automated System
236003ea32
Reset submodule main/libraries/libtdeldap/cmake to latest HEAD
10 years ago
Automated System
7574e4ec3b
Reset submodule main/libraries/libtdeldap/admin to latest HEAD
10 years ago
Automated System
2fc02e1e73
Reset submodule main/libraries/libtdeldap/admin to latest HEAD
10 years ago
Automated System
8a3c42ea73
Reset submodule main/libraries/libtdeldap/cmake to latest HEAD
10 years ago
Automated System
c96fbe6605
Reset submodule main/libraries/libtdeldap/cmake to latest HEAD
10 years ago
Automated System
11392417a1
Reset submodule main/libraries/libtdeldap/cmake to latest HEAD
10 years ago
Automated System
411934fb16
Reset submodule main/libraries/libtdeldap/cmake to latest HEAD
10 years ago
Automated System
a7c71514e2
Reset submodule main/libraries/libtdeldap/admin to latest HEAD
10 years ago
Slávek Banko
9e106b87b8
Fix remaining renaming knewstuff
10 years ago
Automated System
a10b2cf1c8
Reset submodule main/libraries/libtdeldap/cmake to latest HEAD
10 years ago
Timothy Pearson
bea400f197
Fix security hole when Kerberos credential caching is enabled
...
The prior PAM stack configuration, while unfortunately present in many online examples, allows storing of an arbitrary cached password for non-Kerberos users by simply entering it twice
11 years ago
Automated System
93ce320477
Reset submodule main/libraries/libtdeldap/admin to latest HEAD
11 years ago
Automated System
1399355497
Reset submodule main/libraries/libtdeldap/admin to latest HEAD
11 years ago
Automated System
347c5f59d1
Reset submodule main/libraries/libtdeldap/cmake to latest HEAD
11 years ago