From 979d765e0635611fe183a4690b656f3d816939e3 Mon Sep 17 00:00:00 2001 From: Zhanna Tsitkov Date: Thu, 23 Aug 2012 16:14:53 -0400 Subject: Doc newly introduced padata types for OTP support Remove KRB5_PADATA_OTP_CONFIRM pre-authentication data (padata) type as it is marked as OBSOLETE in RFC 6560. --- src/include/krb5/krb5.hin | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) (limited to 'src/include') diff --git a/src/include/krb5/krb5.hin b/src/include/krb5/krb5.hin index 16da72666..2f3974a12 100644 --- a/src/include/krb5/krb5.hin +++ b/src/include/krb5/krb5.hin @@ -970,7 +970,7 @@ krb5_c_keyed_checksum_types(krb5_context context, krb5_enctype enctype, #define KRB5_KEYUSAGE_AD_SIGNEDPATH -21 #define KRB5_KEYUSAGE_IAKERB_FINISHED 42 #define KRB5_KEYUSAGE_PA_PKINIT_KX 44 -#define KRB5_KEYUSAGE_PA_OTP_REQUEST 45 +#define KRB5_KEYUSAGE_PA_OTP_REQUEST 45 /**< See RFC 6560 section 4.2 */ /* define in draft-ietf-krb-wg-preauth-framework*/ #define KRB5_KEYUSAGE_FAST_REQ_CHKSUM 50 #define KRB5_KEYUSAGE_FAST_ENC 51 @@ -1813,12 +1813,11 @@ krb5_verify_checksum(krb5_context context, krb5_cksumtype ctype, #define KRB5_PADATA_FX_FAST 136 #define KRB5_PADATA_FX_ERROR 137 #define KRB5_PADATA_ENCRYPTED_CHALLENGE 138 -#define KRB5_PADATA_OTP_CHALLENGE 141 -#define KRB5_PADATA_OTP_REQUEST 142 -#define KRB5_PADATA_OTP_CONFIRM 143 -#define KRB5_PADATA_OTP_PIN_CHANGE 144 -#define KRB5_PADATA_PKINIT_KX 147 -#define KRB5_ENCPADATA_REQ_ENC_PA_REP 149 +#define KRB5_PADATA_OTP_CHALLENGE 141 /**< See RFC 6560 section 4.1 */ +#define KRB5_PADATA_OTP_REQUEST 142 /**< See RFC 6560 section 4.2 */ +#define KRB5_PADATA_OTP_PIN_CHANGE 144 /**< See RFC 6560 section 4.3 */ +#define KRB5_PADATA_PKINIT_KX 147 +#define KRB5_ENCPADATA_REQ_ENC_PA_REP 149 #define KRB5_SAM_USE_SAD_AS_KEY 0x80000000 #define KRB5_SAM_SEND_ENCRYPTED_SAD 0x40000000 -- cgit