projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cdd631f) | patch
Implement restrict_anonymous_to_tgt realm flag
authorGreg Hudson <ghudson@mit.edu>
Wed, 1 Dec 2010 20:01:46 +0000 (20:01 +0000)
committerGreg Hudson <ghudson@mit.edu>
Wed, 1 Dec 2010 20:01:46 +0000 (20:01 +0000)
commit9479352bf9c570659ebdc40561ac81a7eb292b08
tree3a4fc5078619402e8aba1386d2a99f58a207efc2tree | snapshot
parentcdd631f3ec5c02f9c2983f459f944577a5a0c3e2commit | diff
Implement restrict_anonymous_to_tgt realm flag

Implement a new realm flag to reject ticket requests from anonymous
principals to any principal other than the local TGT.  Allows FAST to
be deployed using anonymous tickets as armor in realms where the set
of authenticatable users must be constrained.

ticket: 6829
target_version: 1.9
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24547 dc483132-0cff-0310-8789-dd5450dbe970
doc/admin.texinfo diff | blob | history
src/include/adm.h diff | blob | history
src/include/k5-int.h diff | blob | history
src/kdc/extern.h diff | blob | history
src/kdc/kdc_util.c diff | blob | history
src/kdc/main.c diff | blob | history
src/lib/kadm5/admin.h diff | blob | history
src/lib/kadm5/alt_prof.c diff | blob | history
src/tests/t_anonpkinit.py diff | blob | history
src/util/k5test.py diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.