diff options
| author | Nathaniel McCallum <npmccallum@redhat.com> | 2012-09-10 17:38:23 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2012-09-11 01:05:07 -0400 |
| commit | 43f507711689a71d3aaec8696721b8c981f8428e (patch) | |
| tree | bf12cf79cd74c0e4459947e3d1ea334aca61b479 /src/lib/krb5_32.def | |
| parent | 1d4cf92a9de119e634b068820e48ee509cb1f71f (diff) | |
| download | krb5-43f507711689a71d3aaec8696721b8c981f8428e.tar.gz krb5-43f507711689a71d3aaec8696721b8c981f8428e.tar.xz krb5-43f507711689a71d3aaec8696721b8c981f8428e.zip | |
Add responder feature for initial cred exchanges
Add new APIs:
* krb5_get_init_creds_opt_set_responder
* krb5_responder_get_challenge
* krb5_responder_list_questions
* krb5_responder_set_answer
If a caller sets a responder, it will be invoked after preauth modules
have had a chance to review their incoming padata but before they produce
outgoing padata. The responder will be presented a set of questions with
optional challenges. The responder should then answer all questions it knows
how to handle. Both the answers and the challenges are printable UTF-8 and
may contain encoded, structured data specific to the question asked.
Add two new callbacks and one optional method to the clpreauth
interface. The new method (prep_questions) allows modules to ask questions
by setting them in the responder context using one of the new callbacks
(ask_responder_question). The other new callback (get_responder_answer) is
used by the process method to read the answers to the questions asked.
ticket: 7355 (new)
Diffstat (limited to 'src/lib/krb5_32.def')
| -rw-r--r-- | src/lib/krb5_32.def | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/lib/krb5_32.def b/src/lib/krb5_32.def index 09adc92e00..a363801b25 100644 --- a/src/lib/krb5_32.def +++ b/src/lib/krb5_32.def @@ -431,3 +431,7 @@ EXPORTS krb5_cccol_have_content @402 krb5_kt_client_default @403 krb5int_cc_user_set_default_name @404 ; PRIVATE LEASH + krb5_get_init_creds_opt_set_responder @405 + krb5_responder_get_challenge @406 + krb5_responder_list_questions @407 + krb5_responder_set_answer @408 |