diff options
Diffstat (limited to 'src/include/krb5/krb5.hin')
| -rw-r--r-- | src/include/krb5/krb5.hin | 31 |
1 files changed, 25 insertions, 6 deletions
diff --git a/src/include/krb5/krb5.hin b/src/include/krb5/krb5.hin index d569bcd..24e7173 100644 --- a/src/include/krb5/krb5.hin +++ b/src/include/krb5/krb5.hin @@ -2261,15 +2261,34 @@ krb5_get_init_creds_opt_set_pa(krb5_context context, krb5_error_code KRB5_CALLCONV krb5_get_init_creds_opt_set_fast_ccache_name(krb5_context context, +/**This API sets a ccache name that will contain some TGT on calls to + get_init_creds functions. If set, this ccache will be used for FAST + (draft-ietf-krb-wg-preauth-framework) to protect the AS-REQ from + observation and active attack. If the fast_ccache_name is set, then FAST + may be required by the client library. In this and future versions, FAST + will be used if available; krb5_get_init_creds_opt_set_fast_flags() may be + used to require that the request fail is FAST is unavailable. In MIT + Kerberos 1.7 setting the fast ccache at all required that FAST be present + or the request would fail.*/ krb5_get_init_creds_opt *opt, const char *fast_ccache_name); -/* This API sets a ccache name that will contain some TGT on - calls to get_init_creds functions. If set, this ccache will - be used for FAST (draft-ietf-krb-wg-preauth-framework) to - protect the AS-REQ from observation and active attack. If - the fast_ccache_name is set, then FAST may be required by the - client library. In this version FAST is required.*/ +/**Set a ccache where resulting credentials will be stored. If set, then the + * krb5_get_init_creds family of APIs will write out credentials to the given + * ccache. Setting an output ccache is desirable both because it simplifies + * calling code and because it permits the krb5_get_init_creds APIs to write + * out configuration information about the realm to the ccache. + */ +krb5_error_code KRB5_CALLCONV +krb5_get_init_creds_opt_set_out_ccache +(krb5_context context, krb5_get_init_creds_opt *opt, krb5_ccache ccache); +krb5_error_code KRB5_CALLCONV +krb5_get_init_creds_opt_set_fast_flags +(krb5_context context, krb5_get_init_creds_opt *opt, krb5_flags flags); +krb5_error_code KRB5_CALLCONV +krb5_get_init_creds_opt_get_fast_flags +(krb5_context context, krb5_get_init_creds_opt *opt, krb5_flags *out_flags); + krb5_error_code KRB5_CALLCONV krb5_get_init_creds_password(krb5_context context, krb5_creds *creds, krb5_principal client, char *password, |