summaryrefslogtreecommitdiffstats
path: root/src/include
diff options
context:
space:
mode:
authorGreg Hudson <ghudson@mit.edu>2013-08-31 11:45:48 -0400
committerGreg Hudson <ghudson@mit.edu>2013-09-03 19:13:50 -0400
commit0ebf39d8787b04b524967cdd48f1f1bcaf6bf8f9 (patch)
tree61f0124386c36ddf28f0d9d87164f1e84bff19b1 /src/include
parent81ceb5352dd3bc11a546d818107d0c4a896cee44 (diff)
downloadkrb5-0ebf39d8787b04b524967cdd48f1f1bcaf6bf8f9.tar.gz
krb5-0ebf39d8787b04b524967cdd48f1f1bcaf6bf8f9.tar.xz
krb5-0ebf39d8787b04b524967cdd48f1f1bcaf6bf8f9.zip
Support FAST hide-client-names option
In the KDC, if we see the hide-client-names option, identify the client as the anonymous principal in KDC-REP and KRB-ERROR responses. The actual client name is present in encrypted FAST elements. ticket: 7700 (new)
Diffstat (limited to 'src/include')
-rw-r--r--src/include/k5-int.h2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/include/k5-int.h b/src/include/k5-int.h
index ab97f40bb6..d6f9325eb6 100644
--- a/src/include/k5-int.h
+++ b/src/include/k5-int.h
@@ -778,7 +778,7 @@ typedef struct _krb5_fast_req {
/* Bits 0-15 are critical in fast options.*/
#define UNSUPPORTED_CRITICAL_FAST_OPTIONS 0x00ff
-#define KRB5_FAST_OPTION_HIDE_CLIENT_NAMES 0x01
+#define KRB5_FAST_OPTION_HIDE_CLIENT_NAMES 0x40000000
typedef struct _krb5_fast_finished {
krb5_timestamp timestamp;