]> git.ipfire.org Git - thirdparty/krb5.git/commit
Support KRB5_CERTAUTH_HWAUTH_PASS in certauth 1220/head
authorKen Hornstein <kenh@cmf.nrl.navy.mil>
Thu, 30 Sep 2021 21:10:06 +0000 (17:10 -0400)
committerGreg Hudson <ghudson@mit.edu>
Thu, 28 Oct 2021 19:43:19 +0000 (15:43 -0400)
commitd22ed9b9216b35b0bd7cc0bfc9fea37060c273ec
treeefea09e2da793029c3d1408db3fe426be6252b76
parente557f051d1605ee980b136cae020866873ffb223
Support KRB5_CERTAUTH_HWAUTH_PASS in certauth

If a certauth module returns KRB5_CERTAUTH_HWAUTH_PASS, the certauth
accumulator sets the hw-authent flag in the ticket (like it would for
KRB5_CERTAUTH_HWAUTH), but defers authorization to other modules (like
it would for KRB5_PLUGIN_NO_HANDLE).

[ghudson@mit.edu: simplify tests by removing the HWAUTH returns from
the test2 module and allowing it to pass by authenticating as nocert]
doc/plugindev/certauth.rst
src/lib/krb5/error_tables/k5e1_err.et
src/plugins/certauth/test/certauth_test.exports
src/plugins/certauth/test/main.c
src/plugins/preauth/pkinit/pkinit_srv.c
src/tests/t_certauth.py