diff options
author | Greg Hudson <ghudson@mit.edu> | 2013-08-31 11:45:48 -0400 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2013-09-03 19:13:50 -0400 |
commit | 0ebf39d8787b04b524967cdd48f1f1bcaf6bf8f9 (patch) | |
tree | 61f0124386c36ddf28f0d9d87164f1e84bff19b1 /src/include | |
parent | 81ceb5352dd3bc11a546d818107d0c4a896cee44 (diff) | |
download | krb5-0ebf39d8787b04b524967cdd48f1f1bcaf6bf8f9.tar.gz krb5-0ebf39d8787b04b524967cdd48f1f1bcaf6bf8f9.tar.xz krb5-0ebf39d8787b04b524967cdd48f1f1bcaf6bf8f9.zip |
Support FAST hide-client-names option
In the KDC, if we see the hide-client-names option, identify the
client as the anonymous principal in KDC-REP and KRB-ERROR responses.
The actual client name is present in encrypted FAST elements.
ticket: 7700 (new)
Diffstat (limited to 'src/include')
-rw-r--r-- | src/include/k5-int.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/include/k5-int.h b/src/include/k5-int.h index ab97f40bb6..d6f9325eb6 100644 --- a/src/include/k5-int.h +++ b/src/include/k5-int.h @@ -778,7 +778,7 @@ typedef struct _krb5_fast_req { /* Bits 0-15 are critical in fast options.*/ #define UNSUPPORTED_CRITICAL_FAST_OPTIONS 0x00ff -#define KRB5_FAST_OPTION_HIDE_CLIENT_NAMES 0x01 +#define KRB5_FAST_OPTION_HIDE_CLIENT_NAMES 0x40000000 typedef struct _krb5_fast_finished { krb5_timestamp timestamp; |