diff options
| author | Ken Raeburn <raeburn@mit.edu> | 2001-09-26 03:47:47 +0000 |
|---|---|---|
| committer | Ken Raeburn <raeburn@mit.edu> | 2001-09-26 03:47:47 +0000 |
| commit | ed96414c30ce1f6bad4f0f1f22b6d2d8800cc008 (patch) | |
| tree | 6c98a25e645cb611608a3a8ef3090c54fd71fdd1 /src/kdc/extern.h | |
| parent | e5de98cc3e7d32615193b106ed4193bb532a6532 (diff) | |
| download | krb5-ed96414c30ce1f6bad4f0f1f22b6d2d8800cc008.tar.gz krb5-ed96414c30ce1f6bad4f0f1f22b6d2d8800cc008.tar.xz krb5-ed96414c30ce1f6bad4f0f1f22b6d2d8800cc008.zip | |
better realm transit path checking for app server
transit path checking enforcement for kdc; supporting code, doc update
[merged from 1.2.3 release branch]
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13758 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kdc/extern.h')
| -rw-r--r-- | src/kdc/extern.h | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/src/kdc/extern.h b/src/kdc/extern.h index 01a267d271..556cc5710f 100644 --- a/src/kdc/extern.h +++ b/src/kdc/extern.h @@ -1,7 +1,7 @@ /* * kdc/extern.h * - * Copyright 1990 by the Massachusetts Institute of Technology. + * Copyright 1990,2001 by the Massachusetts Institute of Technology. * * Export of this software from the United States of America may * require a specific license from the United States Government. @@ -67,12 +67,15 @@ typedef struct __kdc_realm_data { krb5_deltat realm_maxrlife; /* Maximum renewable life for realm */ void *realm_kstypes; /* Key/Salts supported for realm */ krb5_int32 realm_nkstypes; /* Number of key/salts */ + krb5_boolean realm_reject_bad_transit; /* Accept unverifiable transited_realm ? */ } kdc_realm_t; extern kdc_realm_t **kdc_realmlist; extern int kdc_numrealms; extern kdc_realm_t *kdc_active_realm; +kdc_realm_t *find_realm_data (char *, krb5_ui_4); + /* * Replace previously used global variables with the active (e.g. request's) * realm data. This allows us to support multiple realms with minimal logic @@ -89,6 +92,7 @@ extern kdc_realm_t *kdc_active_realm; #define tgs_server kdc_active_realm->realm_tgsprinc #define dbm_db_name kdc_active_realm->realm_dbname #define primary_port kdc_active_realm->realm_pport +#define reject_bad_transit kdc_active_realm->realm_reject_bad_transit /* various externs for KDC */ extern krb5_data empty_string; /* an empty string */ |