diff options
| author | Isaac Boukris <iboukris@gmail.com> | 2020-03-09 16:04:21 +0100 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2020-05-20 16:11:52 -0400 |
| commit | 4f7c77b64a048ca5e3199b26b31493698c777a9c (patch) | |
| tree | 444e4e01325936fdcd95aabf796c41f7b34aebc1 /src/include | |
| parent | 429a31146083fac21958631c2af572b08ec91022 (diff) | |
| download | krb5-4f7c77b64a048ca5e3199b26b31493698c777a9c.zip krb5-4f7c77b64a048ca5e3199b26b31493698c777a9c.tar.gz krb5-4f7c77b64a048ca5e3199b26b31493698c777a9c.tar.bz2 | |
Implement KERB_AP_OPTIONS_CBT (server side)
Add server support for Microsoft's KERB_AP_OPTIONS_CBT as described in
MS-KILE. If the client includes the AP option in the authenticator
authdata and the server passed channel bindings, require the bindings
to match.
[ghudson@mit.edu: refactored to put more logic in the helper function;
added a comment; clarified commit message]
ticket: 8900 (new)
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/krb5/krb5.hin | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/include/krb5/krb5.hin b/src/include/krb5/krb5.hin index fb4fa84..114ab19 100644 --- a/src/include/krb5/krb5.hin +++ b/src/include/krb5/krb5.hin @@ -1909,6 +1909,7 @@ krb5_verify_checksum(krb5_context context, krb5_cksumtype ctype, #define KRB5_AUTHDATA_SIGNTICKET 512 /**< formerly 142 in krb5 1.8 */ #define KRB5_AUTHDATA_FX_ARMOR 71 #define KRB5_AUTHDATA_AUTH_INDICATOR 97 +#define KRB5_AUTHDATA_AP_OPTIONS 143 /** @} */ /* end of KRB5_AUTHDATA group */ /* password change constants */ |