diff options
author | Andreas Schneider <asn@samba.org> | 2015-12-01 18:42:03 +0100 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2016-04-27 15:04:58 -0400 |
commit | 8fc32c0d8d6887ad628382f0b90439bfce82fb73 (patch) | |
tree | 18422e7b5a537cf279f2a40323f636e9cfcd2f50 /src/include/krb5 | |
parent | 91bb3a49f9964eaa21e4ed860fffc6b623d4313b (diff) | |
download | krb5-8fc32c0d8d6887ad628382f0b90439bfce82fb73.zip krb5-8fc32c0d8d6887ad628382f0b90439bfce82fb73.tar.gz krb5-8fc32c0d8d6887ad628382f0b90439bfce82fb73.tar.bz2 |
Add krb5_get_init_creds_opt_set_pac_request()
Add a new public function to set a PAC request option for an AS
request.
[ghudson@mit.edu: simplified code; made signature conform to Heimdal
function; expanded on doxygen comment; added new function to API
reference; changed code to send encoded KERB-PA-PAC-REQUEST instead
of a single octet]
ticket: 7985
Diffstat (limited to 'src/include/krb5')
-rw-r--r-- | src/include/krb5/krb5.hin | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/src/include/krb5/krb5.hin b/src/include/krb5/krb5.hin index f52a9ea..a1bf849 100644 --- a/src/include/krb5/krb5.hin +++ b/src/include/krb5/krb5.hin @@ -7100,6 +7100,26 @@ krb5_get_init_creds_opt_set_out_ccache(krb5_context context, krb5_ccache ccache); /** + * @brief Ask the KDC to include or not include a PAC in the ticket + * + * @param [in] context Library context + * @param [in] opt Options structure + * @param [in] req_pac Whether to request a PAC or not + * + * If this option is set, the AS request will include a PAC-REQUEST pa-data + * item explicitly asking the KDC to either include or not include a privilege + * attribute certificate in the ticket authorization data. By default, no + * request is made; typically the KDC will default to including a PAC if it + * supports them. + * + * @version New in 1.15 + */ +krb5_error_code KRB5_CALLCONV +krb5_get_init_creds_opt_set_pac_request(krb5_context context, + krb5_get_init_creds_opt *opt, + krb5_boolean req_pac); + +/** * Set FAST flags in initial credential options. * * @param [in] context Library context |