diff options
| author | Sam Hartman <hartmans@mit.edu> | 2009-01-06 22:32:30 +0000 |
|---|---|---|
| committer | Sam Hartman <hartmans@mit.edu> | 2009-01-06 22:32:30 +0000 |
| commit | ac73e9e2f5529346da66ee0a00c3014e00fc4d55 (patch) | |
| tree | f45774de188e3fe783df2514ea7306e5fd884624 /src/include/kdb_ext.h | |
| parent | aa7c5ce799f1744dd7d745ca4a572cd12206b9a8 (diff) | |
| download | krb5-ac73e9e2f5529346da66ee0a00c3014e00fc4d55.tar.gz krb5-ac73e9e2f5529346da66ee0a00c3014e00fc4d55.tar.xz krb5-ac73e9e2f5529346da66ee0a00c3014e00fc4d55.zip | |
Patch from Luke Howard
to make an explicit call to check the ACL for s4u delegations rather than relying on tl-data.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21712 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include/kdb_ext.h')
| -rw-r--r-- | src/include/kdb_ext.h | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/src/include/kdb_ext.h b/src/include/kdb_ext.h index 0b4c4a97f9..87959538e9 100644 --- a/src/include/kdb_ext.h +++ b/src/include/kdb_ext.h @@ -90,7 +90,7 @@ krb5_error_code krb5_db_invoke ( krb5_context kcontext, #define KRB5_KDB_METHOD_AUDIT_AS 0x00000050 #define KRB5_KDB_METHOD_AUDIT_TGS 0x00000060 #define KRB5_KDB_METHOD_REFRESH_POLICY 0x00000070 -#define KRB5_KDB_METHOD_GET_PAC_PRINC 0x00000080 +#define KRB5_KDB_METHOD_CHECK_ALLOWED_TO_DELEGATE 0x00000080 typedef struct _kdb_sign_auth_data_req { krb5_magic magic; @@ -162,4 +162,10 @@ typedef struct _kdb_audit_tgs_req { krb5_error_code error_code; } kdb_audit_tgs_req; +typedef struct _kdb_check_allowed_to_delegate_req { + krb5_magic magic; + const krb5_db_entry *server; + krb5_const_principal proxy; +} kdb_check_allowed_to_delegate_req; + #endif /* KRB5_KDB5_EXT__ */ |