master
Add paChecksum2 to PKINIT ASN.1 tests
Eliminate old-style function declarations
Add master key rollover tests in k5test framework
Prevent integer overrun in keytab parsing
Add auto_fast_armor realm variable
Fix CI errors on Ubuntu 24.04
Support PKCS11 EC client certs in PKINIT
Move test utilities out of dejagnu subdirectory
Fix more non-prototype functions
Run KEYRING ccache tests in session wrapper
Implement replaced_reply_key input to issue_pac()
Fix a typo that causes the jsonwalker test to fail
Allow selective overrides in crypto back-ends
Use the term "primary KDC" in source and docs
Honor transited-policy-checked flag in servers
Improve error message for DES kadmin/history key
Add tests for send and receive sendto_kdc hooks
Add hostrealm interface tests
Expand dns_canonicalize_host=fallback support
Fix typos in comments
Perform atomic ccache refreshes when possible
Avoid more undefined memcpy/etc. invocations
Rename two test programs for consistency
Zero length fields when freeing object contents
Use memory replay cache for DO_TIME auth contexts
Fix strchr() conformance to C23
Add tests for krb5_sname_to_principal
Cache S4U2Proxy requests by second ticket
Add tests for S4U request-authdata handling
Add alias support
Change KDC constrained-delegation precedence order
Add klist -I option to show auth indicators
Explicitly look for python2 in configure.in
Add margin to expired tickets in test suite
Add k5test.py facilities for PKINIT
Add support for UNIX domain sockets
Add support for start_realm cache config
Convert Python tests to Python 3
Fix KDC null deref on bad encrypted challenge
Remove ovsec_adm_export dump format support
Don't issue session keys with deprecated enctypes
Rewrite not-yet-covered dejagnu tests in Python
Improve ulog block resize efficiency
Fix kadmin -k with fallback or referral realm
Remove libkdb_ldap null argument checks
Clear forwardable flag instead of denying request
Avoid daylight savings time issues in tests
Work around macOS SIP in the test suite
Limit -keepold for self-service key changes
Allow kinit with keytab to defer canonicalization
Make kprop work for dump files larger than 4GB
Fix Python deprecation warnings
Force "fork" method in t_otp.py
Remove the v4 and afs3 salt types
Update test suite to avoid single-DES enctypes
Allow aliases when matching U2U second ticket
Add xrealmauthz KDC policy module and tests
Fix memory leaks in test programs