aboutsummaryrefslogtreecommitdiff
path: root/src/kdc
diff options
context:
space:
mode:
authorSam Hartman <hartmans@mit.edu>2011-09-21 18:40:16 +0000
committerSam Hartman <hartmans@mit.edu>2011-09-21 18:40:16 +0000
commitaf2ddab839944028ef51d9ef393496063f454bea (patch)
treefcfae71ea2f257595d3572610ec3cc5592aad998 /src/kdc
parent013643be34ccfacd0be794ff55a89f609d576796 (diff)
downloadkrb5-af2ddab839944028ef51d9ef393496063f454bea.zip
krb5-af2ddab839944028ef51d9ef393496063f454bea.tar.gz
krb5-af2ddab839944028ef51d9ef393496063f454bea.tar.bz2
If the client offers the alg agility KDF, use it
Signed-off-by: Margaret Wasserman <mrw@painless-security.com> pkinit: changes to call alg-agility KDF git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25218 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kdc')
-rw-r--r--src/kdc/kdc_preauth.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/kdc/kdc_preauth.c b/src/kdc/kdc_preauth.c
index 72c1752..69b1e2c 100644
--- a/src/kdc/kdc_preauth.c
+++ b/src/kdc/kdc_preauth.c
@@ -1104,6 +1104,8 @@ check_padata (krb5_context context, krb5_db_entry *client, krb5_data *req_pkt,
/* This value is shared with KRB5KDC_ERR_DH_KEY_PARAMETERS_NOT_ACCEPTED. */
/* case KRB5KDC_ERR_KEY_TOO_WEAK: */
case KRB5KDC_ERR_DISCARD:
+ /* pkinit alg-agility */
+ case KRB5KDC_ERR_NO_ACCEPTABLE_KDF:
return retval;
default:
return KRB5KDC_ERR_PREAUTH_FAILED;