summaryrefslogtreecommitdiffstats
path: root/src/include
diff options
context:
space:
mode:
authorKen Raeburn <raeburn@mit.edu>2003-05-10 02:09:34 +0000
committerKen Raeburn <raeburn@mit.edu>2003-05-10 02:09:34 +0000
commit57a21011ff605a03c3ae5d021c4a0c2ef8361b4c (patch)
tree526b823109cba814c815e814cb0c055a1ba07fb5 /src/include
parentadd085032f4694dece32c11662cbdfe0c5b29043 (diff)
downloadkrb5-57a21011ff605a03c3ae5d021c4a0c2ef8361b4c.tar.gz
krb5-57a21011ff605a03c3ae5d021c4a0c2ef8361b4c.tar.xz
krb5-57a21011ff605a03c3ae5d021c4a0c2ef8361b4c.zip
Add a new krb5_context field for the config-file tgs_enctypes, which
applications cannot override, and use it for ticket-granting tickets needed to acquire some desired service ticket. ticket: 1429 tags: pullup status: resolved git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15411 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include')
-rw-r--r--src/include/ChangeLog5
-rw-r--r--src/include/k5-int.h11
2 files changed, 16 insertions, 0 deletions
diff --git a/src/include/ChangeLog b/src/include/ChangeLog
index 327e3e3974..00f359f4a0 100644
--- a/src/include/ChangeLog
+++ b/src/include/ChangeLog
@@ -1,3 +1,8 @@
+2003-05-09 Ken Raeburn <raeburn@mit.edu>
+
+ * k5-int.h (struct _krb5_context): New fields conf_tgs_ktypes,
+ conf_tgs_ktypes_count, use_conf_ktypes.
+
2003-05-09 Tom Yu <tlyu@mit.edu>
* krb5.hin: Add krb5_auth_con_getsendsubkey,
diff --git a/src/include/k5-int.h b/src/include/k5-int.h
index ccbd168999..596784bef3 100644
--- a/src/include/k5-int.h
+++ b/src/include/k5-int.h
@@ -1017,6 +1017,17 @@ struct _krb5_context {
absolute limit on the UDP packet size. */
int udp_pref_limit;
+ /* This is the tgs_ktypes list as read from the profile, or
+ set to compiled-in defaults. The application code cannot
+ override it. This is used for session keys for
+ intermediate ticket-granting tickets used to acquire the
+ requested ticket (the session key of which may be
+ constrained by tgs_ktypes above). */
+ krb5_enctype *conf_tgs_ktypes;
+ int conf_tgs_ktypes_count;
+ /* Use the _configured version? */
+ krb5_boolean use_conf_ktypes;
+
#ifdef KRB5_DNS_LOOKUP
krb5_boolean profile_in_memory;
#endif /* KRB5_DNS_LOOKUP */