Lines Matching defs:krbtgt
39 * return the realm of a krbtgt-ticket or NULL
107 hdb_entry_ex *krbtgt,
144 ret = hdb_enctype2key(context, &krbtgt->entry, enctype, &key);
191 hdb_entry_ex *krbtgt,
231 ret = hdb_enctype2key(context, &krbtgt->entry, sp.etype, &key);
287 hdb_entry_ex *krbtgt,
343 client, server, krbtgt, &pac, &signed_pac);
739 hdb_entry_ex *krbtgt,
799 krb5_principal_get_realm(r->context, krbtgt->entry.principal));
944 krbtgt,
1243 kdc_log(r->context, r->config, 0, "Failed to verify AP-REQ: %s: (krbtgt was %s)",
1478 hdb_entry_ex *krbtgt,
1626 kdc_log(context, config, 5, "krbtgt for realm %s "
1732 * Check that service is in the same realm as the krbtgt. If it's
1741 ret = hdb_enctype2key(context, &krbtgt->entry,
1745 "Failed to find key for krbtgt PAC check");
1750 * Now refetch the primary krbtgt, and get the current kvno (the
1757 krb5_principal_get_comp_string(context, krbtgt->entry.principal, 1);
1767 "Failed to generate krbtgt principal");
1776 ret = krb5_unparse_name(context, krbtgt->entry.principal, &ktpn);
1779 "Request with wrong krbtgt: %s, %s not found in our database",
1791 * krbtgt/<this>/@REALM component of the krbtgt DN the request was
1801 "Request with wrong krbtgt: %s",
1813 "Failed to find key for krbtgt PAC signature");
1818 * Check if we would know the krbtgt key for the PAC. We would
1819 * only know this if the krbtgt principal was the same (ie, in our
1823 if (krb5_principal_compare(context, krbtgt_out->entry.principal, krbtgt->entry.principal))
1837 * If the client belongs to the same realm as our krbtgt, it
1858 client, server, krbtgt,
1872 /* also check the krbtgt for signature */
1875 krbtgt,
1969 * If the client belongs to the same realm as our krbtgt, it
2046 * Require that the KDC have issued the service's krbtgt (not
2129 client, server, krbtgt,
2148 krbtgt,
2191 krbtgt->entry.principal,