libkafs: derivation from non-DES key (rxkad-kdf)

Add support for the "rxkad-kdf" protocol for deriving rxkad session keys
from non-DES Kerberos session keys.  This allows rxkad to be used in
realms where the KDC is unwilling or unable to issue tickets with
single-DES session keys.
This commit is contained in:
Jeffrey Hutzelman
2014-08-21 13:05:59 -04:00
parent 6501ba7e95
commit 9d511ea37d
4 changed files with 233 additions and 15 deletions

View File

@@ -150,6 +150,9 @@ _kafs_v4_to_kt(CREDENTIALS *, uid_t, struct kafs_token *);
void
_kafs_fixup_viceid(struct ClearToken *, uid_t);
int
_kafs_derive_des_key(krb5_enctype, void *, size_t, char[8]);
#ifdef _AIX
int aix_pioctl(char*, int, struct ViceIoctl*, int);
int aix_setpag(void);