Lines Matching refs:krbtgt
39 * return the realm of a krbtgt-ticket or NULL
107 hdb_entry_ex *krbtgt,
144 ret = hdb_enctype2key(context, &krbtgt->entry, NULL, enctype, &key);
191 hdb_entry_ex *krbtgt,
231 ret = hdb_enctype2key(context, &krbtgt->entry, NULL, /* XXX use correct kvno! */
288 hdb_entry_ex *krbtgt,
343 client, server, krbtgt, &pac, &signed_pac);
779 hdb_entry_ex *krbtgt,
1009 krbtgt,
1197 hdb_entry_ex **krbtgt,
1253 &krbtgt_kvno, NULL, krbtgt);
1311 krbtgt_kvno_try = krbtgt_kvno ? krbtgt_kvno : (*krbtgt)->entry.kvno;
1315 krbtgt_keys = hdb_kvno2keys(context, &(*krbtgt)->entry, krbtgt_kvno_try);
1316 ret = hdb_enctype2key(context, &(*krbtgt)->entry, krbtgt_keys,
1559 hdb_entry_ex *krbtgt,
1584 krb5_principal_get_realm(context, krbtgt->entry.principal);
1586 krb5_principal_get_comp_string(context, krbtgt->entry.principal, 1);
1749 kdc_log(context, config, 5, "krbtgt from %s via %s for "
1871 * Check that service is in the same realm as the krbtgt. If it's
1880 ret = hdb_enctype2key(context, &krbtgt->entry, NULL, /* XXX use the right kvno! */
1884 "Failed to find key for krbtgt PAC check");
1889 * Now refetch the primary krbtgt, and get the current kvno (the
1902 "Failed to make krbtgt principal name object for "
1909 "Failed to make krbtgt principal name object for "
1918 ret = krb5_unparse_name(context, krbtgt->entry.principal, &ktpn);
1930 * krbtgt/<this>/@REALM component of the krbtgt DN the request was
1940 "Request with wrong krbtgt: %s",
1952 "Failed to find key for krbtgt PAC signature");
1959 "Failed to find key for krbtgt PAC signature");
1973 * If the client belongs to the same realm as our krbtgt, it
1994 client, server, krbtgt,
2007 /* also check the krbtgt for signature */
2010 krbtgt,
2125 * If the client belongs to the same realm as our krbtgt, it
2221 * Require that the KDC have issued the service's krbtgt (not
2306 client, server, krbtgt,
2325 krbtgt,
2368 krbtgt->entry.principal,
2504 hdb_entry_ex *krbtgt = NULL;
2532 &krbtgt,
2562 krbtgt,
2610 if(krbtgt)
2611 _kdc_free_ent(context, krbtgt);