summaryrefslogtreecommitdiffstats
path: root/src/include/krb5/kdcpreauth_plugin.h
diff options
context:
space:
mode:
authorGreg Hudson <ghudson@mit.edu>2013-04-26 15:50:05 -0400
committerGreg Hudson <ghudson@mit.edu>2013-05-03 16:11:28 -0400
commite50482720a805ecd8c160e4a8f4a846e6327dca2 (patch)
tree9614b63f7a7c003e60332be49f3900dd1c9752de /src/include/krb5/kdcpreauth_plugin.h
parent8c4db8f776c65b50fe3af82fd62a67022dd9a6d5 (diff)
downloadkrb5-e50482720a805ecd8c160e4a8f4a846e6327dca2.tar.gz
krb5-e50482720a805ecd8c160e4a8f4a846e6327dca2.tar.xz
krb5-e50482720a805ecd8c160e4a8f4a846e6327dca2.zip
Add kdcpreauth callback to check for client keys
Add a new have_client_keys callback to the kdcpreauth interface, allowing modules to efficiently check whether the client DB entry has any keys matching the request enctypes. ticket: 7630
Diffstat (limited to 'src/include/krb5/kdcpreauth_plugin.h')
-rw-r--r--src/include/krb5/kdcpreauth_plugin.h8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/include/krb5/kdcpreauth_plugin.h b/src/include/krb5/kdcpreauth_plugin.h
index e673d40035..9abe76f634 100644
--- a/src/include/krb5/kdcpreauth_plugin.h
+++ b/src/include/krb5/kdcpreauth_plugin.h
@@ -173,6 +173,14 @@ typedef struct krb5_kdcpreauth_callbacks_st {
krb5_kdcpreauth_rock rock);
/* End of version 1 kdcpreauth callbacks. */
+
+ /* Return true if the client DB entry contains any keys matching the
+ * request enctypes. */
+ krb5_boolean (*have_client_keys)(krb5_context context,
+ krb5_kdcpreauth_rock rock);
+
+ /* End of version 2 kdcpreauth callbacks. */
+
} *krb5_kdcpreauth_callbacks;
/* Optional: preauth plugin initialization function. */