aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPavel Březina <pbrezina@redhat.com>2021-12-02 14:24:35 +0100
committerGreg Hudson <ghudson@mit.edu>2021-12-29 21:47:23 -0500
commit7f84f66e1a0c3877dd20fcf705182480cf00de0a (patch)
tree05649bfa685604d73486ffd3a441b73f7eea948f
parent3c66c1fec7ce4edeff284a5e4abe32d0b4398539 (diff)
downloadkrb5-7f84f66e1a0c3877dd20fcf705182480cf00de0a.zip
krb5-7f84f66e1a0c3877dd20fcf705182480cf00de0a.tar.gz
krb5-7f84f66e1a0c3877dd20fcf705182480cf00de0a.tar.bz2
Add PA-REDHAT-IDP-OAUTH2 padata type
Recognize the Red Hat IdP preauth mechanism in trace messages, and add a declaration for it in krb5.h. [ghudson@mit.edu: edited comment and commit message] ticket: 9041 (new)
-rw-r--r--doc/appdev/refs/macros/index.rst1
-rw-r--r--src/include/krb5/krb5.hin1
-rw-r--r--src/lib/krb5/os/trace.c1
3 files changed, 3 insertions, 0 deletions
diff --git a/doc/appdev/refs/macros/index.rst b/doc/appdev/refs/macros/index.rst
index 21619b9..722ebbb 100644
--- a/doc/appdev/refs/macros/index.rst
+++ b/doc/appdev/refs/macros/index.rst
@@ -279,6 +279,7 @@ Public
KRB5_PADATA_SAM_RESPONSE_2.rst
KRB5_PADATA_SESAME.rst
KRB5_PADATA_SPAKE.rst
+ KRB5_PADATA_REDHAT_IDP_OAUTH2.rst
KRB5_PADATA_SVR_REFERRAL_INFO.rst
KRB5_PADATA_TGS_REQ.rst
KRB5_PADATA_USE_SPECIFIED_KVNO.rst
diff --git a/src/include/krb5/krb5.hin b/src/include/krb5/krb5.hin
index 5ebf5a7..79c66da 100644
--- a/src/include/krb5/krb5.hin
+++ b/src/include/krb5/krb5.hin
@@ -1847,6 +1847,7 @@ krb5_verify_checksum(krb5_context context, krb5_cksumtype ctype,
#define KRB5_ENCPADATA_REQ_ENC_PA_REP 149 /**< RFC 6806 */
#define KRB5_PADATA_AS_FRESHNESS 150 /**< RFC 8070 */
#define KRB5_PADATA_SPAKE 151
+#define KRB5_PADATA_REDHAT_IDP_OAUTH2 152 /**< Red Hat IdP mechanism */
#define KRB5_PADATA_PAC_OPTIONS 167 /**< MS-KILE and MS-SFU */
#define KRB5_SAM_USE_SAD_AS_KEY 0x80000000
diff --git a/src/lib/krb5/os/trace.c b/src/lib/krb5/os/trace.c
index 59df450..3369fc4 100644
--- a/src/lib/krb5/os/trace.c
+++ b/src/lib/krb5/os/trace.c
@@ -164,6 +164,7 @@ padata_type_string(krb5_preauthtype type)
case KRB5_ENCPADATA_REQ_ENC_PA_REP: return "PA-REQ-ENC-PA-REP";
case KRB5_PADATA_AS_FRESHNESS: return "PA_AS_FRESHNESS";
case KRB5_PADATA_SPAKE: return "PA-SPAKE";
+ case KRB5_PADATA_REDHAT_IDP_OAUTH2: return "PA-REDHAT-IDP-OAUTH2";
default: return NULL;
}
}