]> git.ipfire.org Git - thirdparty/krb5.git/commit
Implement KERB_AP_OPTIONS_CBT (server side)
authorIsaac Boukris <iboukris@gmail.com>
Mon, 9 Mar 2020 15:04:21 +0000 (16:04 +0100)
committerGreg Hudson <ghudson@mit.edu>
Wed, 20 May 2020 20:11:52 +0000 (16:11 -0400)
commit4f7c77b64a048ca5e3199b26b31493698c777a9c
tree444e4e01325936fdcd95aabf796c41f7b34aebc1
parent429a31146083fac21958631c2af572b08ec91022
Implement KERB_AP_OPTIONS_CBT (server side)

Add server support for Microsoft's KERB_AP_OPTIONS_CBT as described in
MS-KILE.  If the client includes the AP option in the authenticator
authdata and the server passed channel bindings, require the bindings
to match.

[ghudson@mit.edu: refactored to put more logic in the helper function;
added a comment; clarified commit message]

ticket: 8900 (new)
src/include/krb5/krb5.hin
src/lib/gssapi/krb5/accept_sec_context.c