Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove any chance of passwords persisting in deallocated main memory after ↵ | Timothy Pearson | 2015-10-01 | 1 | -1/+2 |
| | | | | application termination | ||||
* | Fix FTBFS on ancient Heimdal versions | Timothy Pearson | 2015-09-30 | 1 | -0/+4 |
| | |||||
* | Add deactivated krb5 PKCS login line | Timothy Pearson | 2015-09-29 | 1 | -3/+18 |
| | |||||
* | Write out remaining appdefaults entries on client | Timothy Pearson | 2015-09-29 | 1 | -3/+6 |
| | |||||
* | Allow Kerberos ticket init via cryptographic card | Timothy Pearson | 2015-09-29 | 1 | -5/+76 |
| | |||||
* | Write missing appdefaults section on client machines | Timothy Pearson | 2015-09-29 | 1 | -0/+15 |
| | |||||
* | Add PKI subject mapping to user principals | Timothy Pearson | 2015-09-29 | 1 | -1/+90 |
| | | | | Fix long-standing inability to clear user principal attribute fields | ||||
* | Convert the last methods using the kadmin utility to the Heimdal C API | Timothy Pearson | 2015-09-29 | 1 | -68/+129 |
| | |||||
* | Move keytab export to native Heimdal API | Timothy Pearson | 2015-09-29 | 1 | -356/+240 |
| | |||||
* | Convert service add to C API | Timothy Pearson | 2015-09-28 | 1 | -126/+12 |
| | |||||
* | Remove dead code from prior commit | Timothy Pearson | 2015-09-28 | 1 | -121/+0 |
| | |||||
* | Convert machine add to kadmin API | Timothy Pearson | 2015-09-28 | 1 | -90/+246 |
| | |||||
* | Fix local kadmin access | Timothy Pearson | 2015-09-28 | 1 | -14/+95 |
| | |||||
* | Start to move away from using the kadmin binary to using the kadmin client API | Timothy Pearson | 2015-09-27 | 1 | -91/+109 |
| | |||||
* | Fix a few minor issues with PKI certificate generation | Timothy Pearson | 2015-09-24 | 1 | -3/+12 |
| | |||||
* | Minor fixup to cert generation code | Timothy Pearson | 2015-09-19 | 1 | -1/+1 |
| | |||||
* | Extend PKCS certificate generation routines | Timothy Pearson | 2015-09-19 | 1 | -32/+44 |
| | | | | This breaks the ABI | ||||
* | Add PKCS methods | Timothy Pearson | 2015-09-18 | 1 | -4/+104 |
| | |||||
* | Clean up revoked certificates when done updating CRL | Timothy Pearson | 2015-09-04 | 1 | -0/+14 |
| | |||||
* | Fix up certificate expiry detection | Timothy Pearson | 2015-09-04 | 1 | -1/+1 |
| | |||||
* | Add certificate store attribute access method | Timothy Pearson | 2015-09-03 | 1 | -0/+68 |
| | |||||
* | Add additional CRL manipulation methods | Timothy Pearson | 2015-09-03 | 1 | -34/+105 |
| | |||||
* | Store CRL expiry in LDAP | Timothy Pearson | 2015-09-03 | 1 | -0/+37 |
| | |||||
* | Add CRL generation | Timothy Pearson | 2015-09-03 | 1 | -30/+188 |
| | |||||
* | Implement several methods required for PKI certificate management | Timothy Pearson | 2015-09-02 | 1 | -6/+100 |
| | |||||
* | Extend user key and certificate generation methods | Timothy Pearson | 2015-09-01 | 1 | -39/+206 |
| | |||||
* | Fix CN/DN ordering | Timothy Pearson | 2015-08-31 | 1 | -3/+7 |
| | |||||
* | Properly set CRL URL and fix up a few other glitches | Timothy Pearson | 2015-08-31 | 1 | -14/+20 |
| | |||||
* | Allow CRL URL to be set via configuration file | Timothy Pearson | 2015-08-31 | 1 | -0/+2 |
| | |||||
* | Fix up Kerberos PKI certificate generation | Timothy Pearson | 2015-08-31 | 1 | -8/+265 |
| | |||||
* | Allow certificate expiry to be set | Timothy Pearson | 2015-08-25 | 1 | -4/+37 |
| | |||||
* | Extend CA expiry to 1 year | Timothy Pearson | 2015-08-24 | 1 | -2/+3 |
| | |||||
* | Fix incorrect login causing PAM fatal error message | Timothy Pearson | 2015-08-23 | 1 | -1/+1 |
| | |||||
* | Fix security hole when Kerberos credential caching is enabled | Timothy Pearson | 2014-06-07 | 1 | -1/+1 |
| | | | | The prior PAM stack configuration, while unfortunately present in many online examples, allows storing of an arbitrary cached password for non-Kerberos users by simply entering it twice | ||||
* | Make bonding and unbonding methods slightly more robust | Timothy Pearson | 2014-01-07 | 1 | -1/+37 |
| | |||||
* | Fix LDAP CA root file configuration | Timothy Pearson | 2014-01-06 | 1 | -2/+7 |
| | |||||
* | Look for CA file in correct location on bonded machines | Timothy Pearson | 2014-01-06 | 1 | -11/+11 |
| | |||||
* | Do not replicate olcGlobal by default | Timothy Pearson | 2013-07-16 | 1 | -2/+3 |
| | |||||
* | Fix incorrect certificate CA file in ldap client configuration | Timothy Pearson | 2013-07-11 | 1 | -1/+1 |
| | |||||
* | Use shared realm certificate file name to allow syncrepl to work | Timothy Pearson | 2013-07-11 | 1 | -6/+6 |
| | |||||
* | Use more precise syncrepl configuration | Timothy Pearson | 2013-07-11 | 1 | -2/+2 |
| | |||||
* | Fix failure to use provided error string handler in getRealmCAMaster | Timothy Pearson | 2013-07-02 | 1 | -1/+1 |
| | |||||
* | Fix syncrepl retry timeout and enable hdb replication | Timothy Pearson | 2013-07-02 | 1 | -18/+45 |
| | |||||
* | Properly set up syncrepl | Timothy Pearson | 2013-07-02 | 1 | -81/+85 |
| | |||||
* | Add missing data fields to LDAPMasterReplicationInfo structure | Timothy Pearson | 2013-07-01 | 1 | -1/+115 |
| | |||||
* | Add a number of methods to enable multi-master replication | Timothy Pearson | 2013-06-27 | 1 | -105/+591 |
| | |||||
* | Fix failure when long Kerberos commands are used | Timothy Pearson | 2013-06-26 | 1 | -12/+13 |
| | | | | This failure was due to an obscure ASCII sequence used in the output of kadmin | ||||
* | Fix cron script failure | Timothy Pearson | 2013-06-11 | 1 | -2/+4 |
| | |||||
* | Cleanup output clutter. | Darrell Anderson | 2013-05-06 | 1 | -39/+39 |
| | |||||
* | Add paged search capability | Timothy Pearson | 2013-04-23 | 1 | -44/+303 |
| |