kdc: support for GSS-API pre-authentication

Add support for GSS-API pre-authentication to the KDC, using a simplified variation of draft-perez-krb-wg-gss-preauth-02 that encodes GSS-API context tokens directly in PADATA, and uses FX-COOKIE for state management. More information on the protocol and implementation may be found in lib/gssapi/preauth/README.md.
2021-07-29 12:56:10 +10:00
parent 15c82996a4
commit 49f3f5bd99
40 changed files with 3132 additions and 90 deletions
--- a/kdc/headers.h
+++ b/kdc/headers.h
@@ -98,6 +98,7 @@
 #include <hdb.h>
 #include <hdb_err.h>
 #include <der.h>
+#include <gssapi/gssapi.h>

 #ifndef NO_NTLM
 #include <heimntlm.h>